1972

Correctness by construction

Good software begins with reasoning about what each part must guarantee.