TLA+

The Specification-Implementation Gap Is Where Bugs Live

There's a claim that surfaces periodically in programming language theory circles: 'a sufficiently detailed specification is indistinguishable from code.' The...