Ada, or How to Enforce Safety Rules at Compile Time