How to write correct code by construction using the Coq Proof Assistantbetterprogramming.pub158 pointsingve3 years ago