"How we prevent conflicts in authoritative DNS configuration using formal verification"
https://blog.cloudflare.com/topaz-policy-engine-design/