Re:What TLA+ can and can't check
by bunderbunder on Wednesday September 30, 2026 @02:08PM
(#49912349)
What you say reminds me of the "Von Neumann Languages Lack Useful Mathematical Properties" section in John Backus's Turing award paper. One of his criticisms of what we would now call imperative languages is that they make it exceedingly difficult to formally prove facts about a program.
https://dl.acm.org/doi/epdf/10.1145/359576.359579