SMS: NASA formal methods: