From a8297780358ada4e8545560505ecf0b15424dbed Mon Sep 17 00:00:00 2001
From: Gerwin Klein <gerwin.klein@proofcraft.systems>
Date: Fri, 28 Aug 2026 15:15:01 +0200
Subject: [PATCH] assumptions: clarify which specification

The previous formulation (according to specification) was ambiguous in
what specification we're talking about.

Signed-off-by: Gerwin Klein <gerwin.klein@proofcraft.systems>
---
 Verification/assumptions.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Verification/assumptions.html b/Verification/assumptions.html
index f73f86c94..41fdb49c4 100644
--- a/Verification/assumptions.html
+++ b/Verification/assumptions.html
@@ -43,7 +43,7 @@
   <li>
     <b>Hardware:</b> we assume the hardware works correctly. In
     practice, this means the hardware is assumed not to be tampered
-    with, and working according to specification. It also means, it
+    with, and working as the formal model predicts. It also means, it
     must be run within its operating conditions.
   </li>
   <li>