As with formal methods, assurance cases are routinely used for the verification
of safety-critical systems and high-assurance security systems. The first
assurance cases were, in fact, safety cases for physical systems—in this case,
nuclear facilities—mandated by law in Europe in the late 1960s. Other European