C From Scratch: Learning Safety-Critical C

Why proving code correct before writing it changes everything