Incremental Development of a High Integrity Compiler: Experience from an Industrial Development