at Trusted Computer System Evaluation Criteria (TCSEC) Class A1. (From
an academic standpoint, formal methods provide an excellent teaching tool
as they represent an unambiguous application of pure mathematics to the
problem of system and software engineering.)