Formal Methods in Architecture