Comment by gfd

Can someone summarize how it achieves "provable correctness"?