What [software] must not do is not the inverse of what it must do. .