This is a thoughtful discussion of the promise and limits of software verification. I hadn’t run across it before, so thanks for pointing it out!