• David Gray
Part of the Applied Computing book series (APPLCOMP)


A design is only completed when we have proved it meets its specification, and to do this we need to prove an equivalence between specification and design. In more specific terms, we must prove, before implementation, that our designs meet their requirements (satisfy their specifications) and only those requirements (no over-specification).


External Action Internal Action Successor State Formal Design Derivation Tree 
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.


Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag London Limited 1999

Authors and Affiliations

  • David Gray

There are no affiliations available

Personalised recommendations