When I saw the title, I had assumed it was going to have something to do with formal verification or correct by construction. But obviously different, and a bit over my head. Do you have a real world use case where this would be used that other methods wouldn't work?