Stav dette: NASA formal methods: