safety-critical

Static Analysis Can't Prove Your Airplane Won't Crash. It Can Prove Something More Useful.

Abstract interpretation over-approximates every possible program state.