Added SPARK specification featuring the method error bound.