everything is amplified
proof checks (realistic example checking top level theorem/lemma applies) are kind of like integration tests, but quantifying over an infinity of cases.
bugs in the model are like infinity of bugs. they don't just break some little feature but completely block your progress