Figure 2.
Large-scale formal design
