Hacker News Reader

Having worked in software for healthcare, defense and finance I guarantee you we don't

Do you agree that this isn't a desirable state of affairs?

I have also done those three and we definitely did!

TLA+

TLA+ ensures your model is correct, not that the code is correct