https://blog.cloudflare.com/topaz-policy-engine-design/
>Whenever an engineer changes one of these programs, we run all the programs through our custom model checker (written in Racket + Rosette) to check for certain bugs (e.g., one program overshadowing another) before the programs are deployed.
Rosette? Beautiful.
https://emina.github.io/rosette/
https://github.com/emina/rosette