From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=0.2 required=5.0 tests=BAYES_00,INVALID_MSGID, REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fac41,2c6139ce13be9980 X-Google-Attributes: gidfac41,public X-Google-Thread: f43e6,2c6139ce13be9980 X-Google-Attributes: gidf43e6,public X-Google-Thread: 1108a1,2c6139ce13be9980 X-Google-Attributes: gid1108a1,public X-Google-Thread: 103376,3d3f20d31be1c33a X-Google-Attributes: gid103376,public From: Nick Leaton Subject: Re: Safety-critical development in Ada and Eiffel Date: 1997/08/20 Message-ID: <33FAB35A.18AA15BB@calfp.co.uk>#1/1 X-Deja-AN: 268199985 References: <33E09CD5.634F@flash.net> <33E9ADE9.4709@flash.net> <5siqrr$3of@jupiter.milkyway.org> <5smgts$p68$1@miranda.gmrc.gecm.com> <33EFCCE4.4CE0@flash.net> <5sskfd$nn5$2@miranda.gmrc.gecm.com> <33F25AA5.49ED@flash.net> <5t1fen$c7d$1@miranda.gmrc.gecm.com> <33F52989.38BB@flash.net> <33F83585.2FB006C3@munich.netsurf.de> <33FA76D7.21D9@flash.net> Reply-To: nickle@pauillac X-NNTP-Posting-Host: calfp.demon.co.uk [158.152.70.168] Newsgroups: comp.object,comp.software-eng,comp.lang.ada,comp.lang.eiffel Date: 1997-08-20T00:00:00+00:00 List-Id: > To demonstrate the problem, attempt to encode the critical Ariane 5 > assumption as a "top-level abstract class." It is not directly > representable > as code, even as a "top-level" abstraction. But neither are any of the specs you have for a fighter aircraft. Just as you have to decompose your code, you have to decompose you assertions or specifications. Just because you can't write 'fly plane' and be done with it in Eiffel (or Ada) it doesn't make DBC wrong. > Said another way, could you write "War and Peace" as a "top-level" > abstraction? Ok. A hit B and made up. -- Nick