> this is still a hard problem Which is why I'm rather surprised that these systems continue to be released without any formal specification or model checking.

> this is still a hard problem Which is why I'm rather surprised that these systems continue to be released without any formal specification or model checking. It's hard to get these things right... worth the effort, IMO, to create formal specifications.