5 ms·

> It cannot tell you if the spec if good I beg to differ, if a spec is hard to verify, then it's a bad sign.

• Joker_vD 10mo ago
  All non-trivial specs, like the one for seL4, are hard to verify. Lots of that complexity comes from interacting with the rest of the world which is a huge shared mutable global state you can't afford to ignore. Of course, you can declare that the world itself is inherently sinful and imperfect, and is not ready for your beautiful theories but seriously.
  • jessoteric 10mo ago
    > Of course, you can declare that the world itself is inherently sinful and imperfect, and is not ready for your beautiful theories i see we are both familiar with haskellers (friendly joke!)
• MattHeard 10mo ago
  it can tell you if your spec is bad, but it can't tell you if your spec is good