between the correctness of autodiff systems and that of applications (e.g., gradient descent) built upon autodiff systems?