ACM Queue is pointing at formal verification, but the retained material available here only gives the article title and source inventory, not the article body. Worth clicking if you care about proof claims in software assurance, with the caveat that this packet does not let us check the argument yet.