What are some good examples of complex system properties you've seen verified with sufficiently advanced types?