Design criteria

Easy
Reliable
Correct
Libraries can use it
- signal handlers do not have this property without modifying the appl