“Seibel: There’s a Dijkstra quote about how you can’t prove by testing that a program is bug-free, you can only prove that you failed to find any bugs with your tests. But it sort of sounds the same way with a proof-you can’t prove a program is bug-free with a proof-you can only prove that, as far as you understand your own proof, it hasn’t turned up any bugs.”
