4 ms·

Verification does not need to be an all of nothing approach. Having one part of a system verified means that you are sure certain bugs can't appear on that code

by theFco 15y ago

Verification does not need to be an all of nothing approach. Having one part of a system verified means that you are sure certain bugs can't appear on that code. So, there are less bugs in total, and when facing such a bug you know where you don't need to look. Otherwise you never end, you have to verify your code, the compiler, the operating system, the processor, quantum physics, the creator of the universe...

DanWaterworth 15y ago
That's not quite true. You can't make any assertions about the behaviour of the system if only one part of it is verified. The way to verify the entire system is not to verify that quantum physics works; that doesn't help. Instead you have to assume that the logic gates you are using are deterministic which is impossible to prove. Then you work up from there. Despite this, I do agree that having part of the system verified is better than having none of it verified.