The job of formal methods is to elucidate the assumptions upon which formal correctness depends.
Tony HoareProgrammers are always surrounded by complexity; we cannot avoid it.... If our basic tool, the language in which we design and code our programs, is also complicated, the language itself becomes part of the problem rather than part of its solution.
Tony Hoare