Pessimistic programming assumes the worst