> That implies that you can specify all requirements in a mathematical form, which is not the case. I concede that requirement themselves can't be completely r

> That implies that you can specify all requirements in a mathematical form, which is not the case. I concede that requirement themselves can't be completely reduced to math. But most of them can. Also, the system itself (excluding human operators) can definitely be reduced to pure math. What I was proposing was to check the pure math specification against the mostly math requirements. If such math are simple enough, it should be easy enough to make sure the specs match the needs.