3 ms·
Spot on. :) This has often been the problems with formal methods work. And the spec languages are often worse to find bugs in than the original source! So no
by djcapelis 11y ago
Spot on. :)
This has often been the problems with formal methods work. And the spec languages are often worse to find bugs in than the original source!
So not only does this essentially become another DSL, it is usually a pretty bad one.
- munin 11y agoto be fair it's not just the problem with formal methods work - if you start off with a spec with a bug and implement it faithfully in a non-verified context, you'll still have the bug due to the buggy spec, along with a whole bunch of implementation bugs that you make due to not verifying things...