Merit and Blame Assignment with Kind 2

We introduce two new major features of the open-source model checker Kind 2 which provide traceability information between specification and design elements such as assumptions, guarantees, or other behavioral constraints in synchronous reactive system models. This version can identify minimal sets elements, known Minimal Inductive Validity Cores, are sufficient to prove a given set safety properties, also determine MUST that necessary properties. In addition, is able find constraints, Cut Sets, whose violation leads an unsafe state. illustrate with example how use computed for tracking impact changes, analyzing tolerance resilience against faults.