"In fact, there is an argument to say that any such verified implementation must be open source precisely so it can be inspected." . . . .