The Alloy Language and Tools
steve.freeman