Walter Bright:

I strong, strongly, disagree with the notion that critical systems should soldier on once they have entered an invalid state.

The idea is to design the language and its type system (and static analysis tools) to be able to reduce the frequency (or probability) of such invalid states, because many of them are removed while you write the program.

Bye,
bearophile

Reply via email to