Thread by @hillelogram: This is one of the most common questions about formal methods: how do I rigorously translate a spec to implementationdo I keep them in sync? Short answer: you can’t. Long answer: you can, but it’s incredibly difficult and rarely w…

Source: Thread by @hillelogram: This is one of the most common questions about formal methods: how do I rigorously translate a spec to implementation, and how do I keep the…