The Unreasonable Effectiveness of Property Testing for Validating Formal Specs

proofsandintuitions.net