Comment by crackalamoo

Interesting, how common is this vs just unit testing? How do you avoid formally verifying something against a spec that could subtly fail in production?