People often think of formal methods and theorem provers as forbidding tools, cool in theory but with a steep learning curve that makes them hard...