Describir: Specifying High-Assurance Services.