P2 assumes soundness of the formal system, but if we cannot verify soundness without a stronger syst...