High-integrity programming languages