Specification, verification and enforcement of interface contracts with data

“接口契约”是一个正式的定义，它定义了什么构成了一个特定系统的有效交互。例如，运行Facebook等应用程序的Web浏览器向Facebook服务器发送命令，并处理其响应以更新其显示。类似于两个人之间的真实世界契约，接口契约明确定义了浏览器和服务器如何相互匡威：可以发送哪些命令，期望哪些响应，甚至可以将哪些值放入各种命令中。任何一方不遵守合同都可能导致另一方陷入意想不到的状态。同样，未来火星漫游者的航天器系统测试涉及数千条命令和响应的执行。然后搜索这些事件序列，以发现是否违反了暗示组件故障的“合同”。

An "interface contract" is a formal definition of what constitutes a valid interaction with a particular system over time. For example, a web browser running an application such as Facebook sends commands to the Facebook server and processes its responses to update its display. Similar to a real-world contract between two people, the interface contract clearly defines how the browser and the server are expected to converse with each other: which commands can be sent, what responses are expected, and even what values can be put into the various commands. Not following the contract by either side can result in the other side being thrown into an unexpected state. Similarly, the testing of spacecraft systems for the future Martian rovers involves the execution of thousands of commands and responses. These sequences of events are then searched for violations of a "contract" that hints at component malfunction.