De Millo, Lipton, and Perlis on the Limits of Formal Methods [1979]
fresh.homeunix.net
fresh.homeunix.net
I'm not aware of any real world success story for formal methods in the 30 years since this paper was published to make me doubt its conclusions.