Subtype requirements -- signature and behavior

Safety properties -- nothing bad


slide: Subtyping and behavior