Re: [SC-L] Provably correct microkernel (seL4)

2009-10-03 Thread Bobby Miller
I might argue that it may fix problems that aren't fixable otherwise. My experience in this area is very old, but I found that the biggest benefit of formal methods was not so much the proof but the flaws discovered and fixed on the way to the proof. > In conclusion, it seems an awful effort to

Re: [SC-L] Genotypes and Phenotypes (Gunnar Peterson)

2009-10-13 Thread Bobby Miller
The obvious difference is "parts". In manufacturing, things are assembled from well-known, well-specified, tested parts. Hmmm > ... If you look at other things > that people build, like oil refineries, or commercial aircraft, we can > deal with complexity much more effectively than we can w