Candidature Apprentis (aka CanAp)
Verification framework and tool for higher-order Scala programs
The first real-time VDM-based navigation prototype
Sources of EPFL's Summer Research Institute Website