Conversation

You’re unable to view this Tweet because this account owner limits who can view their Tweets. Learn more

Sep 27, 2018

And not all proofs have to be for the total specification! Nothing wrong with using DT to get a few extra guarantees that don't prove complete correctness but still give you more confidence.

Brendan Zabarauskas

@brendanzab

Sep 27, 2018

Yeah, I find this to be an interesting part of community/culture building for languages with powerful verification systems. How do we let people be comfortable with 'proving just enough', and not chasing the holy grail all the time?

Replying to

and

Similarly we are trying to teach people that you don't need try to put everything on the stack in Rust. In fact it's often faster and easier to dynamically allocate sometimes.

5:54 AM · Sep 27, 2018Twitter Web Client