The new DO-178C and Safety-Critical Java (JSR-302) development standards encourage formal methods in support of high-integrity, object-oriented d...