Simulator vs. Specification Verification
•We are building a verified simulator for SDL specifications – one-time effort •Design engineers can use the simulator  to verify SDL specifications – multiple verification efforts on multiple designs
•ACL2 used in both cases