I don't think formally verifying my showing that the model is correct is good enough anymore. You must prove that your implementation refines the model.
I've been building a TLA style Temporal Logic library for Verus (using LLMs). My experience so far is that LLMs are surprisingly useful at generating the mechanical proof scaffolding (when they're not occasionally trying to cheat with `assume(false)` statements), but they are not a substitute for knowing what property you actually want.
If the change is targeting a rust edition it's being treated as a feature/improvement not as a compiler bug. If there isn't a spec that explicitly says that this is expected behavior (and as far as I know there isn't a concrete spec for the rust language) it should be instead treated as a backwards compatible bug fix
meet.hn/city/37.7707742,-122.3911712/Mission-Bay
Socials: - bsky.app/profile/kab1r.dev - discord:kabr.dev - github.com/Kab1r - linkedin.com/in/Kab1r
Interests: Climbing, DevOps, Open Source
---