Why is writing mathematical proofs more fault-proof than writing code? (2011)