Specification by example