Chris Angelico wrote: > It is still fundamentally difficult to make assertions about the file > system as pre/post contracts. When you consider race conditions, I'd say it's impossible. A postcondition check involving the file system could fail even if the function does its job perfectly. -- Greg