From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.2 required=5.0 tests=BAYES_00,FREEMAIL_FROM, FROM_STARTS_WITH_NUMS autolearn=no autolearn_force=no version=3.4.4 X-Received: by 2002:a24:8645:: with SMTP id u66-v6mr5766165itd.48.1522889061585; Wed, 04 Apr 2018 17:44:21 -0700 (PDT) X-Received: by 2002:a9d:2281:: with SMTP id y1-v6mr1140054ota.14.1522889061362; Wed, 04 Apr 2018 17:44:21 -0700 (PDT) Path: eternal-september.org!reader01.eternal-september.org!reader02.eternal-september.org!feeder.eternal-september.org!feeder.erje.net!2.eu.feeder.erje.net!feeder.usenetexpress.com!feeder-in1.iad1.usenetexpress.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!u184-v6no6914907ita.0!news-out.google.com!u64-v6ni8426itb.0!nntp.google.com!k65-v6no5127339ita.0!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail Newsgroups: comp.lang.ada Date: Wed, 4 Apr 2018 17:44:21 -0700 (PDT) In-Reply-To: <87o9iyk2y9.fsf@nightsong.com> Complaints-To: groups-abuse@google.com Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=85.240.212.102; posting-account=rhqvKAoAAABpikMmPHJSZh4400BboHwT NNTP-Posting-Host: 85.240.212.102 References: <1b44444f-c1b3-414e-84fb-8798961487c3@googlegroups.com> <62ee0aac-49da-4925-b9aa-a16695b3fc45@googlegroups.com> <9879872e-c18a-4667-afe5-41ce0f54559f@googlegroups.com> <87o9iyk2y9.fsf@nightsong.com> User-Agent: G2/1.0 MIME-Version: 1.0 Message-ID: <1e3a9818-7c9a-4a8e-a6fb-ebaabd2570f7@googlegroups.com> Subject: Re: Interesting article on ARG work From: Mehdi Saada <00120260a@gmail.com> Injection-Date: Thu, 05 Apr 2018 00:44:21 +0000 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Xref: reader02.eternal-september.org comp.lang.ada:51336 Date: 2018-04-04T17:44:21-07:00 List-Id: > Is that different from contracts? It's an expansion of contracts. AFAIK, One can define in SPARK whole compil= ation units, whose only purpose is to help writing contracts, for arbitrari= ly complex dynamic or static checking. The principle is, with a specific assertion policy, anything marked with th= e GHOST aspect would disappear from the code (and object code), but the pro= gram would be functionally identical. .. One thing I found (a bit) irritating from a beginner point of view, is t= hat normal visibility rules still still holds in contracts/assertions. It w= ould be much easier to write contracts about conditions of (at least) thing= s declared in the private part. It would be nonsensical to let them reach t= he body though, that I can understand. But why not packages' private part ?