You can prove performance properties, memory properties, and formal properties, or any combination of the above. The question of 'what the program should do' i

You can prove performance properties, memory properties, and formal properties, or any combination of the above. The question of 'what the program should do' is not a mathematical one; it's a philosophical one in the most general sense, and most likely a business one.