How the Symbolic State Exploration works in Symbolic Model Checking...

How to prove decidability of a partial order inductive predicate?...

In Dafny, how can I fix the "value does not satisfy the subset constraints of 'nat'&quo...

Dafny- Using a method to change a inside of a predicate...

A predicate which holds for at most 2...

Show loopy eveness in Dafny...

dafny - puzzling postcondition violation...

Dafny: Using "forall" quantifiers with the "reads" or "modifies" claus...

Check that branches are executed...

Significance of time taken to generate a cover...

Error: VECTORSZ is too small...

Creating a dictionary/map in Coq...

Fully evaluated results in Z3?...

correct use of ``progress`` label...

printing internal solver formulas in z3...

Testing polynomial definition (from natural numbers to integers)...

Defining the predecessor function (with pred 0 = 0) for the natural numbers in Lean...

Why can't Coq figure out symmetry of the equality by itself?...

Proving equivalence of programs...

SAW C verification example fail...

From set inclusion to set equality in lean...

Using sets in lean...

LTL model checking with SPIN...

How to write a definition of the non-dependent product using Pi types in Lean?...

Proving the 100 Prisoners and a lightbulb with Dafny...

Refinement of a B specification...

Safety via external formal proofs...

Reason for difference in number of reachable states...

Count using # not working in Fact (Alloy)...

Use model checker to check one particular trace...