Challenges Defining "correctness". Router configuration is distributed across multiple routers and ASes. Limitations of static analysis?