we use formal correctness proofs as both low-level...
# general
u
we use formal correctness proofs as both low-level module unit tests, and upwards