Formal specification languages have been used mostly to prove mathematically that a program or module is correct, or to automatically construct a correct program. In both cases, a high-level ...