Specification, verification and enforcement of interface contracts with data

“接口契约”是一种正式定义，说明随着时间的推移，什么构成了与特定系统的有效交互。例如，运行Facebook等应用程序的Web浏览器向Facebook服务器发送命令并处理其响应以更新其显示。类似于两个人之间的真实世界契约，接口契约清楚地定义了浏览器和服务器期望如何彼此对话：可以发送哪些命令，期望什么响应，甚至可以为各种命令赋予什么值。任何一方都不遵守合同，可能会导致另一方陷入意外状态。同样，为未来的火星漫游者测试航天器系统涉及执行数千个命令和响应。然后，在这些事件序列中搜索是否违反了暗示部件故障的“合同”。

An "interface contract" is a formal definition of what constitutes a valid interaction with a particular system over time. For example, a web browser running an application such as Facebook sends commands to the Facebook server and processes its responses to update its display. Similar to a real-world contract between two people, the interface contract clearly defines how the browser and the server are expected to converse with each other: which commands can be sent, what responses are expected, and even what values can be put into the various commands. Not following the contract by either side can result in the other side being thrown into an unexpected state. Similarly, the testing of spacecraft systems for the future Martian rovers involves the execution of thousands of commands and responses. These sequences of events are then searched for violations of a "contract" that hints at component malfunction.