why declarative design?
I conclude there are two ways of constructing a software design.
One way is to make it so simple there are obviously no deficiencies, and the other way is to make it so complicated that there are no obvious deficiencies.
– Tony Hoare [Turing Award Lecture, 1980]
why automated analysis?
The first principle is that you must not fool yourself, and you are the easiest person to fool.
– Richard P. Feynman
why SAT?
SAT Performance:
