Formally verifying a floating-point division routine with Gappa – part 1

Explanation of the Linux-kernel memory consistency model (2017)

The Baby Paradox in Haskell

Tic-tac-toe meets Lean 4

Lobsters Interview with Hwayne

Reasoning about systems' state spaces

Linearizability testing S2 with deterministic simulation

Sharing is Scaring: Why is Cloud File-Sharing Hard?

Scaling Correctness: Marc Brooker on a Decade of Formal Methods at AWS

Formal specs as sets of behaviors