Quote: occam has a formal semantics; used an interactive transformation system to prove that an occam program satisfied the IEEE floating point standard
Thirdly, occam has a rich formal semantics which … have been used to formally establish the correctness … long to be performed by experimental testing. [refs]
Google-1Google-2