Completeness of Larch/C++ specifications for black-box reuse