Doing it better 2001-05-07 ### Ideas! Proof-carrying code in MIN is really easy. None of this * rubbish. The best parts are 1) you can delay (run-time) checking an assertion until it makes a difference, and 2) the check is almost free: you add a 'default' clause to your switch statements. Of course, this doesn't tell us how to assert 'some random Mite code doesn't corrupt the heap except it allocates this and frees that and sets other field to number first thought of', which you might be forgiven for wanting to assert. \[snip\] Alistair