Comment by adrianN
10 hours ago
An error in the formalization could also be that you formally prove something different from what you think you proved.
10 hours ago
An error in the formalization could also be that you formally prove something different from what you think you proved.
All that needs to be checked to avoid that is the statement of the main theorem. Any divergence further inside means you proved the main theorem differently than you thought you did -- but you still proved it.
This assumes the Lean kernel itself isn't bugged, but getting it correct is a matter that affects all uses, not just this one, so the cost of making it correct is spread over all those uses.