Comment by archargelod

How do you write a spec for correctness? Only the small and unimpressive programs can be checked exhaustively.