Return to Article Details Verifying BON models with alloy Download Download PDF