9. The apparatus of claim 6 wherein the verification tool executes at least one Nuprl program to perform the verification.
6. A verification apparatus for verifying a system model, the system model comprising a plurality of terms, particular ones of the plurality of terms defining at least one performance attribute of the system model, the verification apparatus comprising: a processor for identifying a plurality of unannotated terms from the plurality of terms, and annotating particular ones of the plurality of unannotated terms with a first annotation, and annotating particular other ones of the plurality of unannotated terms with a second annotation; and a verification tool for performing a verification of the system model using the annotated terms having the first annotation and the annotated terms having the second annotation, the verification being performed by providing an indication whether the system model operates in accordance with a set of system properties, the verification tool proving the correctness of the particular ones of the unannotated terms which are annotated with the first annotation by using a set of inference rules, at least one inference rule of the set of inference rules being a Nuprl inference rule, and the annotated terms having the second annotation requiring no proof of correctness.