TLA+ should be generated by hand as a extremely detailed spec for LLMs to use to generate code
right? I read the kleppman post sometime ago about formal verification taking off but i could never square away who verifies the verifier.
right? I read the kleppman post sometime ago about formal verification taking off but i could never square away who verifies the verifier.