Amalgam - An Alloy extension for equivalence checking of models

Model-checking, an extremely useful technique for checking the consistency of a system, is hampered by an inability to compare models directly to each other. Applications for model comparison include comparing two models meant to express the same system and comparing different versions of the same model to determine whether they remain consistent. We propose Amalgam, a dynamic, sound and complete tool for model equivalence up to a finite bound. Amalgam exhaustively generates all possible instances of two models using a trivial predicate provided by the user and searches for any instance generated by one model but not by another model, using a graph-solver in order to determine whether two instances