The original study saying formal verification was useless. In Section 6 of this paper, Avra Cohn gave a similar reality check when attempting to mechanize a hardware proof. Also, Guttman summarizes here problems with many verification efforts. Finally, Wired has a modern take on debate in 1979 paper by de Millo et al. These collectively represent most of opposition’ points to formal verification of software.