Alcoa: the alloy constraint analyzer. - Daniel Jackson 001; Ian Schechter; Ilya Shlyakhter (ICSE, 2000)