Safe Object-Oriented Software: The Verified Design-by-Contract Paradigm [pdf]