To me that would be the ur-example of "proving it is correct, but that doesn't mean there aren't bugs in it"