Common use of Soundness Clause in Contracts

Soundness. When the checks described above have been performed, we are guaranteed that the soundness requirements described in Section 4.5 are satisfied since our anal- yses are conservative. Ultimately, this works to ensure that the exceptions thrown by the template operations will never occur. Notice that the two checks of templates and code are independent, which means that the designer and the programmer are free to work on their own, only bound by the limitations of the contract. Our analyses are of course approximative, which means that they may un- fairly reject programs for which no exceptions would actually be thrown during runtime. However, experiences from the JWIG project [9, 10] indicate that the precision is sufficient for practical use. The analyses are also efficient, handling large programs in mere seconds.

Soundness. When the checks described above have been performed, we are guaranteed that the soundness requirements described in Section 4.5 are satisfied since our anal- yses analyses are conservative. UltimatelyUlti- mately, this works to ensure that the exceptions thrown by the template operations will never occur. Notice that the two checks of templates and code are independent, which means that the designer and the programmer are free to work on their own, only bound by the limitations of the contract. Our analyses are of course approximative, which means that they may un- fairly unfairly reject programs for which no exceptions would actually be thrown during runtime. However, experiences expe- riences from the JWIG project [9, 10] indicate that the precision is sufficient for practical use. The analyses are also efficient, handling large programs in mere seconds.