State Space Explosion: The Reason We Can Never Test Software to Perfection(2021)

Controlling Nondeterminism in Model-Based Tests with Prophecy Variables

Does your test suite account for weak transaction isolation?

Forward and Backward Reasoning in Proof Assistants

Compiling a Test Suite

Most Tests Should Be Generated

Property-Based Testing Against a Model of a Web Application

Logical Time and Deterministic Execution

Efficient and Flexible Model-Based Testing

The Case for Models

Extracting a Verified Interpreter from Isabelle/HOL

Domain-Driven Test Data Generation: A Category-Partition Method and Property-Based Testing Mashup

Property-Based Testing Against a Model of a Web Application

State Space Explosion: The Reason We Can Never Test Software to Perfection (2021)

The Verification Gap: A Major Hurdle for the Industry Adoption of Formal Methods

Refinement: Formalizing the Simplicity Underneath Complex Programs

Misspecification: The Blind Spot of Formal Verification