A PASS is not correctness. Vacuous proofs, complete property suites, BMC versus mode prove, and writing properties that survive k-induction rather than a shallow bound.
Part of Hardware Formal Verification on formal.org.