> But the fact that whole netinet/netinet6 10000+ checks were added
> with
> no human intervention and produced a working, arguably safer kernel,
> is surprising to me.

Interesting!

Why checks and not actionable information?

With 10000+ checks, each may (or may not) add value.

Now, if checks can be replaced with detailed logging of failed checks,
this could provide actionable data.  Failed checks can be investigated
and bug reports submitted.  Exercising the system to try to create
failed checks is another topic...

Best of luck!
--
David Rinehart