Error Handling
lSpecify what happens on bad input as well as good
lImportant for security
lNo undefined behavior
lDon’t silently swallow exceptions
lDon’t warn the user