From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00, REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4 Path: eternal-september.org!reader01.eternal-september.org!reader02.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail From: "G.B." Newsgroups: comp.lang.ada Subject: Re: Tests in a software release Date: Tue, 31 Oct 2017 08:17:21 +0100 Organization: A noiseless patient Spider Message-ID: References: Reply-To: nonlegitur@notmyhomepage.de Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Injection-Date: Tue, 31 Oct 2017 07:17:16 -0000 (UTC) Injection-Info: reader02.eternal-september.org; posting-host="e035d0b4d7dc66ca0565a5721c5f5358"; logging-data="7877"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+5YMDUpKb/yw/XNtVvWrZ01Obyes45vp0=" User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 In-Reply-To: Content-Language: en-US Cancel-Lock: sha1:11nxpQsSe7VxjifWccCUD/wAKf0= Xref: news.eternal-september.org comp.lang.ada:48681 Date: 2017-10-31T08:17:21+01:00 List-Id: On 30.10.17 21:56, Dmitry A. Kazakov wrote: > On 2017-10-30 21:44, G. B. wrote: >> Dmitry A. Kazakov wrote: >>> On 2017-10-28 08:53, G.B. wrote: >>>> On 27.10.17 20:54, Dmitry A. Kazakov wrote: >>>>> The contract requires Constraint_Error propagation. >>>> >>>> Checks require Constraint_Error propagation. >>> >>> Checks ensure Constraint_Error as a part of implementation. >> >> Implementation of checks, not of contracts. > > This is exactly same. So, Ada programs will check theirs checks? Expectations can be stated in comments, or be part of accompanying documentation and still be part of a contract. > There is nothing that is not behavior. Checking is behavior. However, let SPARK check conditions of a contract, and let the result be Truth. Then they have been checked before the program even runs, and turning *off* Ada checks is, therefore, justified. Disabling Ada checks means to rely on this contract. > There is nothing that may not fall under the contract. There are very many things, even in a program, that do exist, exhibit behavior, but are not part of any known, non-fictional contract, such as the transitive closure of an unspeakable hypothesis.