Points about the Z reading
This isn’t proving correctness between a spec and a program
There isn’t a program!
Even the spec without the implementation has value
The most obvious example is when a theorem is posited and then is proven from the rest of the specification
known’ = known ? {name?}
Previous slide
Next slide
Back to first slide
View graphic version