The Alloy Language and Tools
typesanitizer