{"id":"https://openalex.org/W4313679782","doi":"https://doi.org/10.1145/3785652","title":"Lessons from Formally Verified Deployed Software Systems","display_name":"Lessons from Formally Verified Deployed Software Systems","publication_year":2026,"publication_date":"2026-01-16","ids":{"openalex":"https://openalex.org/W4313679782","doi":"https://doi.org/10.1145/3785652"},"language":"en","primary_location":{"id":"doi:10.1145/3785652","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3785652","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3785652","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Li Huang","orcid":"https://orcid.org/0000-0003-3531-4045"},"institutions":[{"id":"https://openalex.org/I193619901","display_name":"Constructor University","ror":"https://ror.org/02yrs2n53","country_code":"DE","type":"education","lineage":["https://openalex.org/I193619901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Li Huang","raw_affiliation_strings":["Constructor University Bremen"],"raw_orcid":"https://orcid.org/0000-0003-3531-4045","affiliations":[{"raw_affiliation_string":"Constructor University Bremen","institution_ids":["https://openalex.org/I193619901"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086167951","display_name":"Sophie Ebersold","orcid":"https://orcid.org/0000-0002-0957-2844"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I134560555","display_name":"Universit\u00e9 Toulouse III - Paul Sabatier","ror":"https://ror.org/02v6kpv12","country_code":"FR","type":"education","lineage":["https://openalex.org/I134560555"]},{"id":"https://openalex.org/I3131550300","display_name":"Universit\u00e9 Toulouse-I-Capitole","ror":"https://ror.org/0443n9e75","country_code":"FR","type":"education","lineage":["https://openalex.org/I3131550300"]},{"id":"https://openalex.org/I4210119061","display_name":"Institut de Recherche en Informatique de Toulouse","ror":"https://ror.org/01rx4qw44","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I205747304","https://openalex.org/I4210119061","https://openalex.org/I4210152422","https://openalex.org/I4405258862","https://openalex.org/I4405259414"]},{"id":"https://openalex.org/I4210152422","display_name":"Universit\u00e9 Toulouse - Jean Jaur\u00e8s","ror":"https://ror.org/04ezk3x31","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210152422"]},{"id":"https://openalex.org/I4210160189","display_name":"Institut Polytechnique de Bordeaux","ror":"https://ror.org/054qv7y42","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210160189"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Sophie Ebersold","raw_affiliation_strings":["IRIT CNRS, University of Toulouse"],"raw_orcid":"https://orcid.org/0000-0002-0957-2844","affiliations":[{"raw_affiliation_string":"IRIT CNRS, University of Toulouse","institution_ids":["https://openalex.org/I4210152422","https://openalex.org/I1294671590","https://openalex.org/I134560555","https://openalex.org/I4210119061","https://openalex.org/I3131550300","https://openalex.org/I4210160189"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060007556","display_name":"Alexander Kogtenkov","orcid":"https://orcid.org/0000-0003-4873-8306"},"institutions":[{"id":"https://openalex.org/I2801221094","display_name":"Constructing Excellence","ror":"https://ror.org/04vxrkc13","country_code":"GB","type":"other","lineage":["https://openalex.org/I2801221094"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Alexander Kogtenkov","raw_affiliation_strings":["Formerly of Constructor Institute of Technology"],"raw_orcid":"https://orcid.org/0000-0003-4873-8306","affiliations":[{"raw_affiliation_string":"Formerly of Constructor Institute of Technology","institution_ids":["https://openalex.org/I2801221094"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073925128","display_name":"Bertrand Meyer","orcid":"https://orcid.org/0000-0002-5985-7434"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Bertrand Meyer","raw_affiliation_strings":["ETH Zurich","Eiffel Software"],"raw_orcid":"https://orcid.org/0000-0002-5985-7434","affiliations":[{"raw_affiliation_string":"ETH Zurich","institution_ids":["https://openalex.org/I35440088"]},{"raw_affiliation_string":"Eiffel Software","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080844487","display_name":"Yinling Liu","orcid":"https://orcid.org/0000-0002-9711-2118"},"institutions":[{"id":"https://openalex.org/I4210110792","display_name":"Centre de Recherche en Automatique de Nancy","ror":"https://ror.org/022r5hc56","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I4210099203","https://openalex.org/I4210100260","https://openalex.org/I4210110792","https://openalex.org/I4210159245","https://openalex.org/I90183372"]},{"id":"https://openalex.org/I90183372","display_name":"Universit\u00e9 de Lorraine","ror":"https://ror.org/04vfs2w97","country_code":"FR","type":"education","lineage":["https://openalex.org/I90183372"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Yinling Liu","raw_affiliation_strings":["CRAN, Universit\u00e9 de Lorraine"],"raw_orcid":"https://orcid.org/0000-0002-9711-2118","affiliations":[{"raw_affiliation_string":"CRAN, Universit\u00e9 de Lorraine","institution_ids":["https://openalex.org/I90183372","https://openalex.org/I4210110792"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":11,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":14.8804,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.98782767,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":"58","issue":"8","first_page":"1","last_page":"37"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12784","display_name":"Modular Robots and Swarm Intelligence","score":0.9442999958992004,"subfield":{"id":"https://openalex.org/subfields/2210","display_name":"Mechanical Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12784","display_name":"Modular Robots and Swarm Intelligence","score":0.9442999958992004,"subfield":{"id":"https://openalex.org/subfields/2210","display_name":"Mechanical Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12000","display_name":"Systems Engineering Methodologies and Applications","score":0.9276999831199646,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10715","display_name":"Distributed and Parallel Computing Systems","score":0.9085000157356262,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6592435836791992},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.540496826171875},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.48101693391799927}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6592435836791992},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.540496826171875},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.48101693391799927}],"mesh":[],"locations_count":6,"locations":[{"id":"doi:10.1145/3785652","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3785652","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2301.02206","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2301.02206","pdf_url":"https://arxiv.org/pdf/2301.02206","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},{"id":"pmh:oai:HAL:hal-05464961v2","is_oa":true,"landing_page_url":"https://hal.science/hal-05464961","pdf_url":"https://hal.science/hal-05464961v2/file/1_Intro_3785652.pdf","source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ACM Computing Surveys, 2026, ⟨10.1145/3785652⟩","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:doi:10.3929/ethz-c-000797221","is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.11850/797221","pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"},{"id":"pmh:oai:HAL:hal-04182599v1","is_oa":true,"landing_page_url":"https://hal.science/hal-04182599","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2023","raw_type":"info:eu-repo/semantics/preprint"},{"id":"doi:10.48550/arxiv.2301.02206","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2301.02206","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1145/3785652","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3785652","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6399999856948853}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W2775081510","https://openalex.org/W2564949988","https://openalex.org/W4252184193","https://openalex.org/W3139619551","https://openalex.org/W3206261744","https://openalex.org/W2163347957","https://openalex.org/W4240497447","https://openalex.org/W2148662736","https://openalex.org/W2170674426","https://openalex.org/W3043183386","https://openalex.org/W3104549103","https://openalex.org/W2967277443","https://openalex.org/W2741973633","https://openalex.org/W4401722656","https://openalex.org/W2064390891"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W2382290278","https://openalex.org/W2478288626","https://openalex.org/W4391913857","https://openalex.org/W2350741829"],"abstract_inverted_index":{"The":[0],"technology":[1],"of":[2,19,28,34,56,71,96],"formal":[3,117],"software":[4,58,107],"verification":[5,97,118],"has":[6],"made":[7],"spectacular":[8],"advances,":[9],"but":[10],"how":[11],"much":[12],"does":[13],"it":[14],"actually":[15],"benefit":[16,115],"the":[17,26,48,57,65,91,94,99,103,106],"development":[18],"practical":[20],"software?":[21],"Considerable":[22],"disagreement":[23],"remains":[24],"about":[25],"practicality":[27],"building":[29],"systems":[30,82],"with":[31],"mechanically-checked":[32],"proofs":[33],"correctness.":[35],"Is":[36],"this":[37,63],"prospect":[38],"confined":[39],"to":[40,52,114],"a":[41,53,69],"few":[42],"expensive,":[43],"life-critical":[44],"projects,":[45,72],"or":[46],"can":[47],"idea":[49],"be":[50],"applied":[51],"wide":[54],"segment":[55],"industry?":[59],"To":[60],"help":[61],"answer":[62],"question,":[64],"present":[66],"survey":[67],"examines":[68],"range":[70],"in":[73],"various":[74],"application":[75],"areas,":[76],"that":[77,105],"have":[78],"produced":[79],"formally":[80],"verified":[81],"and":[83,102,120],"deployed":[84],"them":[85],"for":[86],"actual":[87],"use.":[88],"It":[89],"considers":[90],"technologies":[92],"used,":[93],"form":[95],"applied,":[98],"results":[100],"obtained,":[101],"lessons":[104],"industry":[108],"should":[109],"draw":[110],"regarding":[111],"its":[112],"ability":[113],"from":[116],"techniques":[119],"tools.":[121]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-18T07:39:51.176621","created_date":"2023-01-08T00:00:00"}