22. The software design system according to claim 21 , wherein the verified implementation specification generator comprises a model generator for generating the mathematical models representing the run-time implementation behavior of the software design system from the formal implementation specifications.
23. The software design system according to claim 22 , wherein the model generator of the verified implementation specification generator is arranged to generate mathematical models in CSP notation.