Interaction Trees and Formal Specifications