Property-based testing is also effective in finding bugs even in the absence of any formal model. Basically you just need to identify informal invariants ("prop

Property-based testing is also effective in finding bugs even in the absence of any formal model. Basically you just need to identify informal invariants ("properties"), encode them as asserts, and then run tests with enough coverage to likely find any invariant violations.