Formal verification is useful for security-critical software (e.g. the new AWS hypervisor) or low-level distributed systems components (e.g. Paxos/Raft implementations).