I don't think formally verifying my showing that the model is correct is good enough anymore. You must prove that your implementation refines the model.
I've been building a TLA style Temporal Logic library for Verus (using LLMs). My experience so far is that LLMs are surprisingly useful at generating the mechanical proof scaffolding (when they're not occasionally trying to cheat with `assume(false)` statements), but they are not a substitute for knowing what property you actually want.
That certainly seems to be their attitude. If israel had listened to all of the advice from Britain and France it may well have been 60k Israelis dead. Imagine how many palestinians would have died. Nobody here is arguing against israel in good faith. If anyone had genuinely cared about the palestinians they would have put massive pressure on Hamas and put their full support behind a quick and brutal campaign. What would have happened? A 2 month long war and 20k dead max.
