Software verification games: Designing Xylem, The Code of Plants
The Daikon system for dynamic detection of likely invariants