Program verification is not all-or-nothing (via hwayne) — discussion

#formalmethods