On the inadequacy of ordinary preconditions for the practical design and verification of programs.

Robert L. Baber

Browse the full ISSRE paper archive.