The emphasis of Correctness by Construction in the requirements
phase is to make a clear distinction between user requirements, system
specifications, and domain knowledge. “Satisfaction arguments” are then used
166 Software Security Assurance State-of-the-Art Report (SOAR)