principle. To compensate for the limitations of scale, formal methods have
been applied to selected parts or properties of a software project, in contrast
to applying them to the entire system. As for training limitations, it may be
difficult to find developers with the needed expertise in formal logic, the range