A Cap Makes Brute Force Win
We aimed our own IC3/PDR model checker at the split-brain proof expecting it to beat explicit-state enumeration. It lost — because the lease guard caps one quantity, and that collapses the space brute force has to search.
We aimed our own IC3/PDR model checker at the split-brain proof expecting it to beat explicit-state enumeration. It lost — because the lease guard caps one quantity, and that collapses the space brute force has to search.
What happens to formal verification when the hardware is deterministic.
A one-line soundness hole that zero tests caught and zero users triggered.
A type system that compiles to nothing is not overhead you tolerate — it is proof the compiler can verify and then discard.