Translating CSP trace refinement to UNITY unreachability : a study in data independence