Delivering safe C++ Bjarne Stroustrup Columbia University www.stroustrup.comOverview • The challenges of safety • What is “safety”? • C++ Evolution • with a focus on safety • C++ Core Guidelines Government have begun initiatives to drive the culture of software development towards utilizing memory safe languages. • ... • NSA advises organizations to consider making a strategic shift from programming provide little or no inherent memory protection, such as C/C++, to a memory safe language when possible. Some examples of memory safe languages are C#, Go, Java, Ruby™, and Swift®. • NSA: https://www.open-std

behavior; Medical device operates correctly in response to inputs, including in failure scenarios (Fail-safe Design), to prevent harm or hazards to patient. Security: Protection of systems, networks, and data Lines of C++ CodeReminder to a simple, but often overlooked, question! Why C++? 23Can C++ usage be safe? Mitigate Safety and Security Vulnerabilities What can we do then? 24 Explore Tooling Processes ➢ Being more careful in general is less flexible!What have we learned? Takeaways 69 ❖ Building safe complex medical robotics is actually very hard ❖ Standards/regulations are necessary but not sufficient

Agda User Manual Release 2.6.2 The Agda Team Jun 19, 2021 Contents 1 Overview 3 2 Getting Started 5 2.1 What is Agda? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 2.3 ‘Hello world’ in Agda . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 2.4 A Taste of Agda . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149 3.35 Safe Agda . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Welcome to Agda’s documentation! Overview Getting Started What is Agda? Prerequisites Installation ‘Hello world’ in Agda Quick Guide to Editing, Type Checking and Compiling Agda Code A List of Tutorials Positivity Checking Postulates Pragmas Prop Record Types Reflection Rewriting Run-time Irrelevance Safe Agda Sized Types Syntactic Sugar Syntax Declarations Telescopes Termination Checking Universe Levels Search Definitions in Scope Contribute Documentation The Agda Team and License Indices and tables Index Search Page Overview Note The Agda User Manual is a work-in-progress and is still incomplete

Welcome to Agda’s documentation! Overview Getting Started What is Agda? Prerequisites Installation ‘Hello world’ in Agda Quick Guide to Editing, Type Checking and Compiling Agda Code A List of Tutorials Pattern Synonyms Positivity Checking Postulates Pragmas Prop Record Types Reflection Rewriting Safe Agda Sized Types Syntactic Sugar Syntax Declarations Telescopes Termination Checking Universe Levels LaTeX Library Management Contribute Documentation The Agda Team and License Indices and tables Index Search Page Overview Note The Agda User Manual is a work-in-progress and is still incomplete

Welcome to Agda’s documentation! Overview Getting Started Prerequisites Installation Quick Guide to Editing, Type Checking and Compiling Agda Code Language Reference Abstract definitions Built-ins Recursion Pattern Synonyms Positivity Checking Postulates Pragmas Record Types Reflection Rewriting Safe Agda Sized Types Syntactic Sugar Telescopes Termination Checking Universe Levels With-Abstraction Without LaTeX Library Management Contribute Documentation The Agda License The Agda Team Indices and tables Index Search Page Overview Note The Agda User Manual is a work-in-progress and is still incomplete

Agda User Manual Release 2.6.0 The Agda Team Apr 12, 2019 Contents 1 Overview 1 2 Getting Started 3 2.1 What is Agda? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 2.4 ‘Hello world’ in Agda . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 2.5 Quick Guide to Editing, Type Checking and Compiling Agda Code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114 3.30 Safe Agda . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Agda User Manual Release 2.6.1.2 The Agda Team Feb 03, 2021 Contents 1 Overview 3 2 Getting Started 5 2.1 What is Agda? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 2.4 ‘Hello world’ in Agda . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 2.5 Quick Guide to Editing, Type Checking and Compiling Agda Code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130 3.33 Safe Agda . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Agda User Manual Release 2.6.4.1 The Agda Team Nov 30, 2023 CONTENTS 1 Overview 3 2 Getting Started 5 2.1 What is Agda? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 2.3 ‘Hello world’ in Agda . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 2.4 A Taste of Agda . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175 3.38 Safe Agda . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Agda User Manual Release 2.6.4.3 The Agda Team Mar 06, 2024 CONTENTS 1 Overview 3 2 Getting Started 5 2.1 What is Agda? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 2.3 ‘Hello world’ in Agda . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 2.4 A Taste of Agda . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176 3.38 Safe Agda . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .