(no title)
gz09
|
2 months ago
It's similar in spirit, but in Dafny one can express much more complicated and complex invariants which get checked at build time -- compared to eiffel where pre/post conditions are checked at runtime (in dev builds mostly).
ted_dunning|2 months ago
That means that most of the proof can be done ahead of time with just some loose ends verified using an SMT prover at runtime.
esafak|2 months ago
steego|2 months ago
Dafny’s expressiveness tends to be more in the service of coherent specifications and less in the service of language abstraction for its own sake.