AI Safety Thursdays - Formal Containment: Proof-Carrying Code and AI Safety — LessWrong