Program Safety via Programmer Safety

Summary form only given. Static program checkers rely upon push-button automation to provide quality feedback to programmers ... programmers who are not typically well-versed in a tool's foundations. Thus, ensuring program correctness is as much about program safety as it is about programmer safety. Our tool, ESC/Java, has recently incorporated a number of new programmer-centric features whose focus is on increasing programmer safety. We will discuss these features in detail as well as give some perspective on our continued work on proving program safety properties and evidencing programmer safety properties.