[worik]

> Formal methods do not necessarily prove the absence of bugs either.

They can demonstrate the bugs, when found, are in the specifications

Or in the methods....