"A proof assistant can verify a formal specification without establishing that the specification faithfully represents the original natural-language requirement."
Gordon and Matskevich identify the translation between informal requirements and formal statements as a separate and difficult verification problem. Their research shows why a correct proof of a mistranslated requirement may still fail to establish the intended software behavior.
View Source