Comment

Comment by perching_aix

Definitely at best a "sort of" type perfection. The endgame here is formally verified everything, at which point the only question is whether the then-consistent model that's implemented is any reasonable in practice.

Think "this is not a vulnerability, as no security boundary is being unexpectedly crossed" except the way the security boundaries are laid down is utterly stupid and hilatiously nonsensical. Same for non-security related defects ("working as expected, wontfix" -> "the way it works is dogshit, and so your expectations are idiotic too").

Now, since these things are supposed to align with human sensibilities and are supposed to capture the human semantic understanding of our world, theoretically, this should still leave us in a pretty good spot. But not a guaranteed good spot, as that is not actually tractable, ever, and fundamentally so.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton