Sharon Shoham

Decomposing safety proofs into forward, backward, and prophecy steps dramatically simplifies the search for inductive invariants, enabling verification of complex systems like Paxos and Raft.