More on FSM-Based Rules Each correctness constraint: an FSM specifies the verification procedure gives useful information about the error Tool provides finite-state machinery and some rules Rules are simple: 41 lines of code for next-hop test Figuring out "boundary" between users, developers. Ruleset is part of the tool and is designed for extensibility. Each rule is an FSM specification.