Fifteen years ago computer programming was so badly understood that hardly anyone even thought about proving programs correct; we just fiddled with a program until we “knew” it worked. At that time we didn’t even know how to express the concept that a program was correct, in any rigorous way.[…]