modifications, so it would be possible to maintain the annotations
upstream, and run the proof checker as a CI test.
- - It probably doesn't make sense for qemu right now though, unless we
- could prove more substantial pieces of code.
+ - It probably doesn't make sense for qemu right now though:
+ * concerted effort to prove more substantial pieces of code
+ * would need upstream effort to modularise qemu
+ * co-develop modules and proofs
\f
= POWER OF 2 =