Revisiting an early critique of formal verificationlawrencecpaulson.github.io2 pointsscscsca year ago