[dgb23]

In order for this to cover enough space, I assume you‘d have to really pin down assumptions with asserts and so on in a design by contract style.