Formal maintenance