can include security properties such as noninterference and
separability, persistent_BNDC, noninference, forward-correctability,
and nondeductibility of outputs.
u Property-Based Testing: [272] The purpose of property-based testing is to