Designing for correctness under concurrency