engineering descriptions such as design specifications and code have a
greater chance of performing correctly because relevant aspects of
their behavior can be predicted in advance.
In addition to the principles identified by Schroeder and Saltzer, software