formal methods code snippets in csharp