Event-B

To quote https://www.event-b.org/:

Event-B is a formal method for system-level modelling and analysis.

The big idea is to work with iterative refinements of specifications, slowly adding new terms to our language in such a way that we are Conservative over our previous specification.