Quint: Executable Specs for Reliable Systems
quint-lang.org