Added formal specs