> What happens when real-world inputs drift from what you tested against? The whole point of formal verification is that you don't test. You prove the program

> What happens when real-world inputs drift from what you tested against? The whole point of formal verification is that you don't test. You prove the program correct mathematically for any input. > an agent that's technically correct but consistently misunderstands a whole class of user queries is invisible to any pre-deploy check The agent isn't verifying the program. The agent is writing the code that proves the program correct. If the agent misunderstands, it fails to verify the program.