12.4 Formal and Predictive Models for System Design