Three ways "formally verified" can go wrong (via rbr) — discussion

#formalmethods