On the inadequacy of ordinary preconditions for the practical design and verification of programs | IEEE Conference Publication | IEEE Xplore