nw-solution-architect-formal-verification

Load in the model step to decide which design claims need a formal model, pick Quint or TLA+, and write, check and mutate-test it.