Quote: NIL limits side-effects by erroneous programs to inappropriate results of the correct type;

by typestate checking

--topics--

program proving

error safe systems

--subtopics--

methods of proof

typestate

Quotation Skeleton

NIL security is guaranteed at compile-time by a ... inappropriate results of correct type on their ports.

Copyright clearance needed for quotation.