The verification loop The verification loop Fail Pass Ordered procedure Generated candidate Independent check Scoped claim (defensible) Revision