Common use of Soundness Clause in Contracts

Soundness. When the checks described above have been performed, we are guaranteed that the soundness requirements described in Section 4.5 are satisfied since our analyses are conservative. Ulti- mately, this works to ensure that the exceptions thrown by the template operations will never occur. Notice that the two checks of templates and code are independent, which means that the designer and the programmer are free to work on their own, only bound by the limitations of the contract. Our analyses are of course approximative, which means that they may unfairly reject programs for which no exceptions would actually be thrown during runtime. However, expe- riences from the JWIG project [9, 10] indicate that the precision is sufficient for practical use. The analyses are also efficient, handling large programs in mere seconds.

Soundness. When the checks described above have been performed, we are guaranteed that the soundness requirements described in Section 4.5 are satisfied since our analyses anal- yses are conservative. Ulti- matelyUltimately, this works to ensure that the exceptions thrown by the template operations will never occur. Notice that the two checks of templates and code are independent, which means that the designer and the programmer are free to work on their own, only bound by the limitations of the contract. Our analyses are of course approximative, which means that they may unfairly un- fairly reject programs for which no exceptions would actually be thrown during runtime. However, expe- riences experiences from the JWIG project [9, 10] indicate that the precision is sufficient for practical use. The analyses are also efficient, handling large programs in mere seconds.