reply
"Three ways formally verified code can go wrong in practice" re: Hoare logic and DbC Design-by-Contract patterns: https://news.ycombinator.com/item?id=45562815
reply