Re:Learn TLA+ (2018)
by tunesmith on Saturday February 22, 2020 @11:13PM
(#22395101)
Different proof tools inhabit different areas on the "specification to implementation" spectrum (problem/solution). Since it's possibly to perfectly implement a bad specification, proving a specification valid has value, even if it isn't formally proving your implementation of that spec.
[ Parent
| on HN ]
There are no comments on this comment yet.