daniel jackson & sarfraz khurshid lcs retreat ·martha’s vineyard · june 2k

alloy project

architecture

intentional naming case study

intentional naming

tree representation

strategy

alloy model: state

alloy model: constraints

checking assertions

results

counterexample

time & effort

lessons

related experiences

helping oxygen?

musings