Thread by @hillelogram: This is one of the most common questions about formal methods: how do I rigorously translate a spec to implementationdo I keep them in sync? Short answer: you can’t. Long answer: you can, but it’s incredibly difficult and rarely w…
Formal methods are worth it, but they’re hard. Maybe use them to write TESTS instead of the main app code.
Leave a reply
Here, Read This 