21. The software design system according to claim 16 , wherein the verified implementation specification generator is arranged to carry out a box structure development method for creating formal implementation specifications.
22. The software design system according to claim 21 , wherein the verified implementation specification generator comprises a model generator for generating the mathematical models representing the run-time implementation behavior of the software design system from the formal implementation specifications.