Or, you can have complex systems with PROOFS like CompCert and Sel4. With formal methods, you can move as fast or as slow as you like.