I think that l i copmen to be controversial here, but i think that e attempting to prove properties of programms is wonderful business. The people are really brilliant and do very nice work, and i like the work. But i think it has nothing to do with real sulphur engineering. Most real systems can't be specified. If you could specify them that they're this or dead, that's exactly imagine trying to specify emax. It's changing. By to morrow, somebody's aaded a new feature to morrow. D yo, thecanta. Even if you had arbitrarily good proving technology, what would you actually say it's supposed to do? It's supposed