Credible autocoding of control software