Statistics for ATR: Template-based repair for alloy specifications