Formal verification is not a silver bullet; writing correct and complete specifications requires experience, and the verification coverage is strictly limited by the expressiveness of the specifications