3 ms·
I'm not sure why not. Some of the same groups that sign this code also do formal verification of other codebases, for instance FSBLs. It seems reasonable that t
by debatem1 9y ago
I'm not sure why not. Some of the same groups that sign this code also do formal verification of other codebases, for instance FSBLs. It seems reasonable that they would try similar approaches on TZ code given the scarcity of fuses.
- AstralStorm 9y agoGood joke. There are layers of proprietary software where nobody can audit involved. Can you trust a single auditor ever too? Even an automated exhaustive verifier can be buggy... oot more importantly incomplete if parallelism is considered.