i think he's arguing that it gives us a more precise language to describe our documentation than just regular comments, not that mathematical proofs are fault proof