Nitpick: A Counterexample Generator for Isabelle/HOL Based on the Relational Model Finder Kodkod. - Blanchette, Jasmin Christian (2010)