Formalizing Preferences Over Runtime Distributions