Side note: Formal theorem proving is even more rare than formal model checking..!