Clean theorem prover, can help prove partial correctness of programs, or useful traits of parts of programs; proof process uses hint mechanism, suggests proof actions to user; windowing user interface shows content graphically in windows that can be resiz