Specification Surface

Specification Surface defines how users express models and properties in Zig.

The surface should make the review questions explicit: what state exists, which events may happen, how each event changes the state, and which properties must never be violated.