> Production-ready by formal verification, model checking, deterministic simulation, fuzzing, and lots of testing.
What does model checking mean here?
What does model checking mean here?
Incidentally, the docs don't seem to say what model checker was used. I don't think any of verus, shuffle, or ffs are technically model checkers (or at the very least they don't describe themselves as such)