What can a formal check actually verify?
A tool needs a precise property to check. Translating what someone intended into a formal statement is itself a source of error.
Compare the passages
in the limit I'll like you know formally verify all of my protocols.Before we can start
proving new theorems, we need to be able to
state old theorems