n Overview of the lecture n The Casper interface n Refinement checking and FDR n Model checking n Theorem proving n Safe simplifying transformations