Quint: Formal Verification for Specification Language