Correctness requirements are defined in a list of the software system’s required outputs, such as a query display of a customer’s balance in the sales accounting information system, or the air supply as a function of temperature specified by the firmware of an industrial control unit. Output specifications are usually multidimensional