In introducing these changes to information and operations, the designer must show that the refined description is
a legal one within its language (internal consistency) and that it describes all of the
specified behavior of the high-level description (completeness) in a provably correct
way (relative consistency).