Three ways formally verified code can go wrong in practice

"Correct" doesn't mean "correct" when correctly using "correct"

Computer Things