Design by contract: the lessons of Ariane | IEEE Journals & Magazine | IEEE Xplore