1. A method for verifying instructions in a module of a computer program, one-module-at-a-time, the method comprising: determining whether checking an instruction in a first module requires information in a referenced module different than the first module; and if the information is required, writing a constraint for the referenced module without requiring access to the referenced module.