Formal verification is often treated as a finish line: prove the code once, then trust it forever. That is not what it g…

Formal verification is often treated as a finish line: prove the code once, then trust it forever. That is not what it gives you. It proves that one version of a program matches one version of a specification.

Programs change, and so do their goals.