5 ms·

Heck, even a cache coherence protocol can't be formally verified. Imagine trying to verify an entire CPU...