Is formal verification of practical use in real world projects?

Formal verification is useful for security-critical software (e.g. the new AWS hypervisor) or low-level distributed systems components (e.g. Paxos/Raft implementations).

Full formal verification is rare, but partial guarantees at execution boundaries are very practical — especially for systems that act autonomously.