Comment by choeger

To me it looks like formal verification is going to be the answer. We're going to move up the ladder and write formal specs and proofs soon.