enforce()?

[Walter Bright]

Sean Kelly wrote:
> Regarding DbC, I can't say that I've ever worked on a system where lives hung
> in the balance (an admittedly extreme example of where DbC is useful),

I have, and here's how it's done:

http://www.drdobbs.com/blog/archives/2009/10/safe_systems_fr.html

http://www.drdobbs.com/blog/archives/2009/11/designing_safe.html

I really wish this was more widely known in the software engineering business. 
It's frustrating to see it relearned the hard way, over and over.

And not just the software business, I saw a technical overview of the BP oil 
spill failure, and the rig design violated just about every principle of safe 
system design.