> is pretty much infeasible unless you have formally verified hardware as well, which is not even possible even for commercial vendors Why is it not possible?

> is pretty much infeasible unless you have formally verified hardware as well, which is not even possible even for commercial vendors Why is it not possible? Formal hardware verification is probably more common than formal software verification.