A case study on design for provability

We describe a case study which demonstrates that, by designing with formal verification in mind, a designer can simplify the verification task enormously without sacrificing other design considerations. In addition, the formal specification and verification process can highlight anomalies in a design, and suggest design changes that improve it. The design we considered was a switching fabric for an ATM network switch. It is a real, fabricated component of a working network.