Formal analysis: