possible” applies to any aspect of a system, but it deserves emphasis for
trusted software. This principle minimizes the likelihood of errors in
the code and directly aids its analyzability.
u Analyzability—Systems whose behavior is analyzable from their