> Production-ready by formal verification, model checking, deterministic simulation, fuzzing, and lots of testing.
What does model checking mean here?
> Production-ready by formal verification, model checking, deterministic simulation, fuzzing, and lots of testing.
What does model checking mean here?
My guess is https://en.wikipedia.org/wiki/Model_checking . C Bounded Model Checker [0] is a relatively well-known instance in the niche.
[0]: https://www.cprover.org/cbmc/
No, he used verus, a rust tool. And shuffle and ffs. See his docs