Home Gudgeon and gist Lindsey Kuper Proving that safety-critical neural networks do what they're supposed to (part 1 of 2)