> I used to laugh at Dijkstra's idea that all code should be mathematically proven correct.

That would not help for this outage.