Frequently, it is convenient to describe a program in terms of the normal situations in which it will be used, even if such a description does not describe the its complete behavior in all circumstances. This paper surveys ...