Hacker News new | ask | show | jobs
by pjmlp 270 days ago
Or it might be that the model doesn't really avoid all possible human failures when translating TLA+ into Java, C++ metatemplate programming, or whatver.