This work presents a model-based development methodology1 for verified software systems as well as a tool support for it: an applied AUTOFOCUS 3 tool chain and its basic principles emphasizing the verification of the system under development as well as the check mechanisms we used to raise the level of confidence in the correctness of the implementation of the automatic generators.