Title: Formal methods in specification, CS504a/CS300a