Cleanroom Software Development [Mills et al., 1987]
The “ideal” review process
Based on static verification to ensure error-free development
- defects should be avoided rather than detected and corrected
- defects avoided by developing in an ultra-clean environment (derived by analogy with semiconductor fabrication units)
- structured inspections augmented with formal correctness arguments
Software components are formally specified and verified instead of usual development and unit/module testing