rene_mobile’s Twitter Archive—№ 7,147

@VTeagueAus @twbtwb Depressingly, that would need to be considered "state of the art" for program verification: a) one group of experts (writes and) verifies the specification, b) another group verifies that code matches the spec. Even if spec is incomplete or wrong b) may be considered successful.