Isn't the problem with formal methods that it isn't clear whether or not most of the useful code we use are actually formally verifiable?
The article mentions NP-complete, but is it actually a solvable problem in general?
> For extremely restricted cases, like propositional logic or HM type-checking, it’s “only” NP-complete.