Lean vs UPPAAL

Lean is an open-source programming language and proof assistant for formalizing mathematics, verifying software, and writing general code. Its minimal trusted kernel checks proofs, and the project describes it as supporting correctness in mathematical, software, and hardware verification. Lean includes the Grind tool for automating some pattern matching, case analysis, and systems of linear inequalities; metaprogramming lets users add notation and proof automation. Projects are managed with Lake, the package manager bundled with Lean. Mathlib is a community-driven library with over a million lines spanning areas including algebra, analysis, topology, probability, and computer science. The recommended setup uses VS Code with the Lean 4 extension for syntax highlighting and code completion, while Neovim with lean.nvim is also well-supported. Lean runs on Linux, macOS, and Windows, and Lean4Web lets users run code in a browser. The software is free under the Apache 2.0 license. Learning resources include textbooks, tutorials, interactive games, documentation, and an API reference.

UPPAAL is an integrated environment for modeling, simulating, and verifying real-time systems as networks of timed automata. Its language supports clock and data variables, including bounded integers and arrays. The model checker uses symbolic state-space exploration for invariant and reachability properties and can produce diagnostic traces. Statistical Model Checking estimates probabilities, compares a probability with a value, or compares two probabilities. UPPAAL Stratego supports generating, optimizing, comparing, and exploring strategies for stochastic priced timed games. Related tools include CORA, TRON, TIGA, ECDAR, and COSHY for cost-optimal analysis, testing, timed games, refinement, and hybrid-system control. Typical applications include real-time controllers and timing-critical communication protocols. Desktop packages support Windows, macOS, and Linux, including macOS x86_64 and Aarch64. The graphical interface needs Java 17 or later; verifyta runs without Java. Academic users register for a free license key, retrieved over the internet. Commercial and other non-academic use requires a separate license.