Verification map
A map of the 88 components of my public toolkit. Rings around each component show which kinds of evidence it has. Sixteen calculations are proved with Dafny for every input: the twelve marked on the map, and four shared by the whole toolkit.
Limits: Each proof covers one stated calculation. The outer ring shows how much of a component’s whole claim has been checked, and it reads unknown for every component.
Dafny is a programming language and verifier that checks code against written specifications.