[7e]

For something that's actually practical for most engineers and at scale, I would look at:

1) https://www.stateright.rs and 2) https://antithesis.com

[irundebian]

Thank you. I took a look at both and while stateright seems to check/derive implementation against the spec, antithesis rather seems to do testing instead of verification.