Comment by kelvin0

A while back I was exploring the use of 'soft' formal methods to help in evaluating correctness of some new modules we had to develop. I had come upon Alloy, which seems like a gentler introduction to formal methods (Unlike Z or Coq).

http://alloy.mit.edu/alloy/

Anyone have any experience using Alloy, or some other formal method?