Answers are grounded in this paper and cite their sources.
ASTRÉE is an abstract interpretation-based static program analyzer aiming at proving automatically the absence of run time errors in programs written in the C programming language. It has been applied with success to large embedded control-command safety critical realtime software generated automatically from synchronous specifications, producing a correctness proof for complex software without any false alarm in a few hours of computation.
No takes yet. Share an insight, caveat, or question.
Cousot et al. (2005) studied this question.