"It is hard to reason about an arbitrary chunk of code specifically because you cannot tell what it does not do. Developers voluntarily impose constraints on the system in order to amplify their reasoning abilities."