@GeorgWeissenbacher@fediscience.org
Post #1546591
2026-04-15 21:24 UTC
@regehr yes, but it is also important that people understand what verification means (and yes, I know you do), also to manage expectations. You can only verify code against some specification or requirements. If that specification is incomplete, then so are your guarantees. Formally verified doesn't mean bug free, unless you have fully formalized what bug free means (which is next to impossible, if you think of security vulnerabilities such as side channel attacks). Formal verification still improves the situation, so we are better off with "formally verified" code than without.
Replies (1)
-
@regehr@mastodon.social 2026-04-15 23:21
@GeorgWeissenbacher of course I agree that formal verification adds value. the reason I do these kinds of posts is that I try to fight against the perception that formal verification has some inherent meaning. people portray it as being some sort of ironclad guarantee. so I think that maybe, perception-wise, you and I are trying to combat opposite misconceptions