“A category of verification tools, including type systems, used to check program properties without execution.”