SMS dit: NASA formal methods :