Its one thing to certify a doctor and another to certify software. There are formal proofs for software. FIPS doesnt work with software, it takes 6 months just

Its one thing to certify a doctor and another to certify software. There are formal proofs for software. FIPS doesnt work with software, it takes 6 months just to pass the process?? What does FIPS mean if after the 6th month another heartbleed is found? FIPS remains but the product is useless.