B buttondown.com Three ways formally verified code can go wrong in practice 184 points todsacerdoti 1 year ago 113 comments