What if you need to demonstrate properties of a software module without giving the other party its source code? This comes up in real projects: proprietary libraries; supplier components; security-sensitive software; licensed IP; implementations shared between organizations with different trust boundaries. The usual choices are not great. Either you disclose the implementation, or the other party has to trust a report saying that some internal verification succeeded. W...