4 ms·

If you have used a model checker, you probably don't have a proof either. You have a model that might not be accurate, and testing all its inputs may be combina

If you have used a model checker, you probably don't have a proof either. You have a model that might not be accurate, and testing all its inputs may be combinatorially prohibitive.

sseveran 12y ago
thats not the real issue. The issue with model checkers is verifying that production code actually exactly implements the model.
- aurelius 12y ago
  Yes, that is <i>another</i> issue with model checkers. Either way, your original comment is still nonsense.
  - sseveran 12y ago
    No. No it is not. See the Amazon paper if you want an overview.