Principles 15-17

"Dijkstra, Hoare, Wirth:

Construction of correct programs requires that programs be intellectually manageable (15).

Key to intellectual manageability is the structure of the program itself (16).

Disciplined use of a few program building blocks facilitates correctness arguments (17)."

Form Nancy Leveson, ESD 355