Reference keyword: Formal methods