Video

Unknown · 0:00

Contracts can support composable correctness, not only local checks: treat correctness as Lamport safety + liveness, prove safety first (it always composes along caller→callee edges), then reduce liveness to progress...

Read the full summary on tuber