I agree in principle, although in practice I am sceptical about the practicality of applying formal methods to large systems. The ratio of effort to reward just

I agree in principle, although in practice I am sceptical about the practicality of applying formal methods to large systems. The ratio of effort to reward just seems too large for most domains.