Design Validation Using ObjectGEODE
Properties describe the needs
Expressed with
- Invariants
- MSCs
- Observers
- observers can “inject errors” in the simulation to verify “robustness” of the models
- computes statistics...
Design PROOF
- Errors never occur
- Needs always fulfilled