CS 357S: Formal Methods for Computer Systems — Stanford Root