I sort of imagine (but I'm not experienced enough to actually state) that you could create a negative specification. Something like: this program will certainly

I sort of imagine (but I'm not experienced enough to actually state) that you could create a negative specification. Something like: this program will certainly not open the file flag.txt This doesn't guarantee the program is correct. But it's not nothing.