Alloy verifier

[Google Scholar] [Wikipedia]

Notes: requirements specification
Papers: