State and operations

Z


Change and invariance

Verification

  • $ state /\ pre( op ) => op $

slide: Model-based specification