3 ms·

No, you are wrong. Some theorem provers, such as Coq, are not Turing-complete. This means you cannot write some programs, and in particular you cannot write in

No, you are wrong. Some theorem provers, such as Coq, are not Turing-complete. This means you cannot write some programs, and in particular you cannot write infinite loops in Coq. Infinite loops are a common pattern (e.g., a REPL or a GUI display waiting for input). This is a trade-off, as I said. You gain the expressive type system, but lose the ability to implement certain programming patterns. It has nothing to do with the strength of the type system. --- > whether its built into the language or ran statically like MyPy. All (true) type-checking is static, so MyPy "running statically" is not a noteworthy feature to distinguish it from other type checkers. I guess this point may seem trivial to some, but the broader context of this conversation involves conflation of the terms "static type system" and "strong type system", so your misuse of the word "statically" here seems worth pointing out. That said, whether you use an external tool to check your types or the type-checker is built into the compiler is irrelevant, and I'm not sure why you brought it up at all. --- > You can take a piece of code in C, and write a test suite on input and output of that piece of code, and accomplish much of the same thing that typing accomplishes. Depending on the perspective, this is factually incorrect. Type-checking is an ahead-of-time operation that guarantees the absence of certain classes of errors at run-time. Writing tests to check for the absence of such errors is not equivalent, because you have not proved anything; you merely gain confidence. They are semantically distinct, even if you write many tests to gain a lot of confidence.

ActorNightly 3y ago
>Some theorem provers, such as Coq, are not Turing-complete. This means you cannot write some programs, and in particular you cannot write infinite loops in Coq. You are talking about languages, Im talking about the concept. The modern theorem provers aren't up to the task. Due to Rices theorem, you cannot "fully prove" a program, so a language that does this couldn't even exist. The strict typing however can be applied to subsets of the programming space, namely the data processing pipeline, whereas higher level stuff like the actual server code that does have an infinite loop to listen to requests can be written in whatever. The point is that no language recommended for strong type safety today is anywhere fully complete to include the rigor of something like a theorem prover, and anything less then that is basically your own opinion on what is "good enough". >Type-checking is an ahead-of-time operation that guarantees the absence of certain classes of errors at run-time. Run time errors are no different than compile time errors as far as testing is concerned. Its not like the computer blows up when you have a seg fault. And you absolutely can prove what you need for operation. Say your input to your code is an HTTP request of length x. And output is some data processing on that request. You can write a test suite that is basically like this 1. Ensure that code returns a well defined error for x values outside of given range. 2. For all valid ranges in x, test all possible values of every byte in that range, and ensure correct behaviour. While overkill, this will absolutely exercise every single piece of your code and prove correctness. You can also couple this with checking things like memory access

ActorNightly 3y ago

>Some theorem provers, such as Coq, are not Turing-complete. This means you cannot write some programs, and in particular you cannot write infinite loops in Coq. You are talking about languages, Im talking about the concept. The modern theorem provers aren't up to the task. Due to Rices theorem, you cannot "fully prove" a program, so a language that does this couldn't even exist. The strict typing however can be applied to subsets of the programming space, namely the data processing pipeline, whereas higher level stuff like the actual server code that does have an infinite loop to listen to requests can be written in whatever. The point is that no language recommended for strong type safety today is anywhere fully complete to include the rigor of something like a theorem prover, and anything less then that is basically your own opinion on what is "good enough". >Type-checking is an ahead-of-time operation that guarantees the absence of certain classes of errors at run-time. Run time errors are no different than compile time errors as far as testing is concerned. Its not like the computer blows up when you have a seg fault. And you absolutely can prove what you need for operation. Say your input to your code is an HTTP request of length x. And output is some data processing on that request. You can write a test suite that is basically like this 1. Ensure that code returns a well defined error for x values outside of given range. 2. For all valid ranges in x, test all possible values of every byte in that range, and ensure correct behaviour. While overkill, this will absolutely exercise every single piece of your code and prove correctness. You can also couple this with checking things like memory access