Table of Contentsdaniel jackson & sarfraz khurshid lcs retreat ·martha’s vineyard · june 2k alloy project architecture intentional naming case study intentional naming tree representation strategy alloy model: state alloy model: constraints checking assertions results counterexample time & effort lessons related experiences helping oxygen? musings |
Author: Daniel Jackson
Email: dnj@lcs.mit.edu Home Page: http://sdg.lcs.mit.edu/~dnj |