“…As a continuation in our efforts to understand how derivation and verification are interrelated, we applied the DDD system [11,12,14], a transformation system which implements a basic design algebra of equivalence preserving transformations for circuit derivation, to Hunt's FM9001 specification [10]. Hunt mechanically verified the FM9001 in the Nqthm theorem prover [5].…”