That&#x27;s what is really cool about this work -- it&#x27;s not just an algorithm that&#x27;s proven correct on paper, it&#x27;s a formally verified _implementation_, so there&#x27;s no formality gap.