Everyone who writes safety critical software should read this

[Timon Gehr]

On 11/04/2013 06:44 PM, qznc wrote:
> On Saturday, 2 November 2013 at 13:59:53 UTC, Timon Gehr wrote:
>>> It took decades to write a certified C compiler.
>>>
>> No, it took four years. CompCert was started in 2005.
>
> CompCert is verified, not certified.
>...

?

http://ncatlab.org/nlab/show/certified+programming
http://adam.chlipala.net/cpdt/html/Intro.html