Checking well-formedness of pure-method specifications