Application of formal methods is always an interesting read, and this article is a gentle introduction to some of the ideas exploited in probabilistic model checking. However to me, the way the article is written, gives software verification, and CBMC in particular, an unnecessary bad reputation.<p>> There is no need to define “game progress” or implement a naive game AI, as formal verification methods appear to require.<p>> The mathematical verification code is about one-third the size of the formal verification code presented by the TTTM author<p>Most of the author's argumentation stems from the different levels of modelling. He pursues verification at <i>model-level</i>. That is, he does the interpretation that a "game progress"/"native game AI" would provide, and lifts the problem from the <i>source-level</i> to a formal representation as Markov process.<p>With that in mind, it should be clear that reasoning on that higher level can be done more efficiently. In fact, if the author of TTTM would have chosen to verify just the transition relation, an even simpler modelling would have sufficed, e.g. via Prism, ITSTools/GAL, SMV.<p>I just want to stress that the author of TTTM did not just formally verify that the concrete <i>transition relation</i> can not reach a "bad state", but proved that <i>the actual implementation</i> indeed cannot reach said states. For example, this also includes proving that the game's pseudo-random generation of initial states is safe to use.<p>> The TTTM formal verification code requires a value called MAX_FINISH_DEPTH, which represents the maximum number of steps required to finish the game from any valid state. It is unclear how the TTTM author arrived at the number 18, but the value can easily be calculated using the matrix representation of the game.<p>Again, when reasoning at the level of an actual implementation, i.e. software/binaries, such high-level reasoning is not applicable. Therefore, when employing bounded verification techniques, an educated guess about a sufficiently high number of steps must be provided.