System specification: a deontic approach