> once a program proved correct Now that's the incredibly difficult part, as bugs are no stranger to code, let alone code that tries to model the real world wi

> once a program proved correct Now that's the incredibly difficult part, as bugs are no stranger to code, let alone code that tries to model the real world with assumptions. The sin function is actually incredibly incredibly complex (https://stackoverflow.com/questions/2284860/how-does-c-compute-sin-and-other-math-functions https://stackoverflow.com/questions/2284860/how-does-c-compu...) and implimentation are full of implicit and imperfect assumptions (like floating point). Under normal use these errors are silently propogated, and the floating point model well designed enough that for the majority it doesn't matter at all. Being able to run a model whilst iterating is great, but at the end of the day it's still a model, and could break down.