Sounds like a case where formal methods might be both appropriate and funding might actually be available for that.