2 ms·
Do I need to know more than what you said - that they can prove that code meets a spec? This can work awesome for small programs and clear algorithms, but as i
by blub 9y ago
Do I need to know more than what you said - that they can prove that code meets a spec?
This can work awesome for small programs and clear algorithms, but as is hinted in the article, one has to first create a correct specification.
I gave an example in another post, here's another: unforeseen interactions between two components built to spec.
- planteen 9y agoI completely agree - most often the spec is wrong. For example, it doesn't matter if you have a completely correct implementation of Euler angles for a control system. If gimbal lock wasn't considered in the spec, you are going to have issues.