Bakar Kiasan: flexible contract checking for critical systems using symbolic execution
Design and Verification of Secure Systems