It&#x27;s pretty cool, but it&#x27;s a little disappointing that they handwave away the possibility that block writes might not happen atomically.  Formal verification is only as good as the assumptions you start from.