Neural networks can learn complex, non-convex functions, and it is challenging to guarantee their correct behavior in safety-critical contexts. Many approaches exist find failures (e.g., adversarial examples), but these cannot the absence of failures. Verification algorithms address this need provide formal guarantees about a neural network by answering “yes or no” questions. For example, they ...