And how do you know the specification is corrrect? (Score 2, Insightful)

All that mathematical methods allow you to do is prove that code satisfies a specification. Unfortunately, in most application domains, generating a rigorous specification is not significantly easier or less error-prone than just writing code.

I think it's very sad when CS people fail to notice this obvious fact.