CoCoSpec: A Mode-Aware Contract Language for Reactive Systems
Dafny: An automatic program verifier for functional correctness