2 ms·Specula: Scaling formal specs for autonomous model checking of system code3 points by matt_d 3mo ago