State and operations
}{
Specifying state and operations
}
Z
state == [ decls | constraints ]
op == [ %D state; decls | constraints ]
Change and invariance
%D state == state /\ state'
%X state == state = state'
Verification
state /\ pre( op ) => op
slide
:
Model-based specification