I think Ada, in its SPARK dialect, should be able to do this.