Formalizing The Logic Of Event-B