Formally Verified Software in the Real World