Interesting considering formal verification is often pointed to as the only solution to understand all possible failure modes. Reading this is sobering because

Interesting considering formal verification is often pointed to as the only solution to understand all possible failure modes. Reading this is sobering because I (ignorantly) assumed the only obstacle to success in formal verification was complexity (and the cost of complexity and few people able to do it).