An empirical study on the correctness of formally verified distributed systems

Back to Research-Papers

By far the biggest group of bugs relate to assumptions about the behaviour of components that the formally verified system interacts with