Static Verification
Correct staging should be statically enforced
• Catch mistakes early
• Diagnose notoriously difficult staging errors
• Support safe program revision
• Prevent inconsistencies at module boundaries