The Unreasonable Effectiveness of Property Testing for Validating Formal Specsproofsandintuitions.net 7_doctor_love27ddiscuss