Guarded Atomic Actions And Refinement In A System-On-Chip Development Flow : Bridging The Specification Gap With Event-B