• High-assurance criteria
  • Enforcement of modularity
  • Support for user-defined abstraction
  • Management of pointers
  • Management of software faults
• Real-time criteria
  • Safe static data allocation
  • Predictability of meeting deadlines
  • Interaction among threads of control