Code Instrumentation: Property oracles were inserted into the code using Aspect C++. An important side benefit of using Aspect C++ was that the application could be instrumented without modification of the source files. This allowed the case study to keep pace with successive SAFM releases.