形式验证的挑战在于弥合抽象模型与实际实现之间的差距。
The opera is a beautiful and irrational world. One could spend a lifetime listening and still not understand everything.
现在,对于做了很小错事的人,人们都知道他做错了并谴责他;对于犯了大的过错,以至于攻打别的国家的人,人们却不知道谴责他,反而跟着赞美这种行为,说这是义。