<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-04182599</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-04-30T09:56:45+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Lessons from Formally Verified Deployed Software Systems (Extended version)</title>
            <author role="aut">
              <persName>
                <forename type="first">Li</forename>
                <surname>Huang</surname>
              </persName>
              <idno type="halauthorid">847477-0</idno>
              <affiliation ref="#struct-1168556"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Sophie</forename>
                <surname>Ebersold</surname>
              </persName>
              <email type="md5">d5e0544cfa562a0273b91dd77e64cd4b</email>
              <email type="domain">univ-tlse2.fr</email>
              <idno type="idhal" notation="string">sophie-ebersold</idno>
              <idno type="idhal" notation="numeric">743701</idno>
              <idno type="halauthorid" notation="string">15338-743701</idno>
              <idno type="IDREF">https://www.idref.fr/119922037</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-0957-2844</idno>
              <affiliation ref="#struct-1001838"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Alexander</forename>
                <surname>Kogtenkov</surname>
              </persName>
              <idno type="halauthorid">2878965-0</idno>
              <affiliation ref="#struct-1168556"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Bertrand</forename>
                <surname>Meyer</surname>
              </persName>
              <idno type="halauthorid">307851-0</idno>
              <affiliation ref="#struct-1168556"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Yinling</forename>
                <surname>Liu</surname>
              </persName>
              <email type="md5">5c15f6914fb65295ea27751d732bda31</email>
              <email type="domain">univ-lorraine.fr</email>
              <idno type="idhal" notation="numeric">1349222</idno>
              <idno type="halauthorid" notation="string">36405-1349222</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-9711-2118</idno>
              <affiliation ref="#struct-185180"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Sophie</forename>
                <surname>Ebersold</surname>
              </persName>
              <email type="md5">d5e0544cfa562a0273b91dd77e64cd4b</email>
              <email type="domain">univ-tlse2.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2023-08-17 18:04:06</date>
              <date type="whenModified">2025-11-04 12:04:20</date>
              <date type="whenReleased">2023-08-17 18:04:06</date>
              <date type="whenProduced">2023-08-17</date>
              <ref type="externalLink" target="http://arxiv.org/pdf/2301.02206"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="601097">
                <persName>
                  <forename>Sophie</forename>
                  <surname>Ebersold</surname>
                </persName>
                <email type="md5">d5e0544cfa562a0273b91dd77e64cd4b</email>
                <email type="domain">univ-tlse2.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-04182599</idno>
            <idno type="halUri">https://hal.science/hal-04182599</idno>
            <idno type="halBibtex">huang:hal-04182599</idno>
            <idno type="halRefHtml">2023</idno>
            <idno type="halRef">2023</idno>
            <availability status="restricted"/>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="UNIV-TLSE2">Université Toulouse 2</idno>
            <idno type="stamp" n="UNIV-TLSE3">Université de Toulouse</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="CRAN">Centre de Recherche en Automatique de Nancy</idno>
            <idno type="stamp" n="UT1-CAPITOLE">Université Toulouse 1 Capitole</idno>
            <idno type="stamp" n="UNIV-LORRAINE">Université de Lorraine</idno>
            <idno type="stamp" n="IRIT">IRIT - Institut de Recherche en Informatique de Toulouse</idno>
            <idno type="stamp" n="IRIT-SMART" corresp="IRIT">Smart Modeling for software Research and Technology</idno>
            <idno type="stamp" n="IRIT-FSL" corresp="IRIT">Fiabilité des Systèmes et des Logiciels</idno>
            <idno type="stamp" n="TOULOUSE-INP">Toulouse - INP</idno>
            <idno type="stamp" n="UNIV-UT3">Université Toulouse 3</idno>
            <idno type="stamp" n="UT3-INP">Université de Toulouse / Toulouse INP</idno>
            <idno type="stamp" n="UT3-TOULOUSEINP">Université de Toulouse / Toulouse INP</idno>
            <idno type="stamp" n="AM2I-UL">Pôle scientifique Automatique, Mathématiques, Informatique et leurs Intéractions de l'Université de Lorraine</idno>
          </seriesStmt>
          <notesStmt/>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Lessons from Formally Verified Deployed Software Systems (Extended version)</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Li</forename>
                    <surname>Huang</surname>
                  </persName>
                  <idno type="halauthorid">847477-0</idno>
                  <affiliation ref="#struct-1168556"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Sophie</forename>
                    <surname>Ebersold</surname>
                  </persName>
                  <email type="md5">d5e0544cfa562a0273b91dd77e64cd4b</email>
                  <email type="domain">univ-tlse2.fr</email>
                  <idno type="idhal" notation="string">sophie-ebersold</idno>
                  <idno type="idhal" notation="numeric">743701</idno>
                  <idno type="halauthorid" notation="string">15338-743701</idno>
                  <idno type="IDREF">https://www.idref.fr/119922037</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-0957-2844</idno>
                  <affiliation ref="#struct-1001838"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Alexander</forename>
                    <surname>Kogtenkov</surname>
                  </persName>
                  <idno type="halauthorid">2878965-0</idno>
                  <affiliation ref="#struct-1168556"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Bertrand</forename>
                    <surname>Meyer</surname>
                  </persName>
                  <idno type="halauthorid">307851-0</idno>
                  <affiliation ref="#struct-1168556"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Yinling</forename>
                    <surname>Liu</surname>
                  </persName>
                  <email type="md5">5c15f6914fb65295ea27751d732bda31</email>
                  <email type="domain">univ-lorraine.fr</email>
                  <idno type="idhal" notation="numeric">1349222</idno>
                  <idno type="halauthorid" notation="string">36405-1349222</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-9711-2118</idno>
                  <affiliation ref="#struct-185180"/>
                </author>
              </analytic>
              <monogr>
                <imprint>
                  <date type="datePub">2023</date>
                </imprint>
              </monogr>
              <idno type="arxiv">2301.02206</idno>
              <idno type="doi">10.48550/arXiv.2301.02206</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Software Engineering (cs.SE)</term>
                <term xml:lang="en">FOS: Computer and information sciences</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="UNDEFINED">Preprints, Working Papers, ...</classCode>
              <classCode scheme="halOldTypology" n="UNDEFINED">Preprints, Working Papers, ...</classCode>
              <classCode scheme="halTreeTypology" n="UNDEFINED">Preprints, Working Papers, ...</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>The technology of formal software verification has made spectacular advances, but how much does it actually benefit the development of practical software? Considerable disagreement remains about the practicality of building systems with mechanically-checked proofs of correctness. Is this prospect confined to a few expensive, life-critical projects, or can the idea be applied to a wide segment of the software industry? To help answer this question, the present survey examines a range of projects, in various application areas, that have produced formally verified systems and deployed them for actual use. It considers the technologies used, the form of verification applied, the results obtained, and the lessons that can be drawn for the software industry at large and its ability to benefit from formal verification techniques and tools. Note: a short version of this paper is also available, covering in detail only a subset of the considered systems. The present version is intended for full reference.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-1168556" status="INCOMING">
          <orgName>Constructor University</orgName>
          <desc>
            <address>
              <country key="DE"/>
            </address>
          </desc>
        </org>
        <org type="researchteam" xml:id="struct-1001838" status="OLD">
          <orgName>Smart Modeling for softw@re Research and Technology</orgName>
          <orgName type="acronym">IRIT-SM@RT</orgName>
          <date type="start">2018-03-01</date>
          <date type="end">2025-01-01</date>
          <desc>
            <address>
              <addrLine>Institut de recherche en informatique de Toulouse - IRIT Maison de la Recherche / Université Toulouse - Jean Jaurès 5 allées Antonio Machado 31058 TOULOUSE Cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.irit.fr/departement/fiabilite-des-systemes-et-des-logiciels/smart/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-34499" type="direct"/>
            <relation active="#struct-81148" type="indirect"/>
            <relation name="443875" active="#struct-443875" type="indirect"/>
            <relation active="#struct-116256" type="indirect"/>
            <relation active="#struct-443875" type="indirect"/>
            <relation active="#struct-217752" type="indirect"/>
            <relation name="UMR5505 / URA1399" active="#struct-441569" type="indirect"/>
            <relation active="#struct-448187" type="indirect"/>
            <relation active="#struct-1149079" type="indirect"/>
            <relation name="FED4171" active="#struct-217752" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-185180" status="VALID">
          <idno type="IdRef">03500472X</idno>
          <idno type="ISNI">0000000121518763</idno>
          <idno type="RNSR">200112440X</idno>
          <idno type="IdUnivLorraine">[UL]RSA--</idno>
          <idno type="ROR">https://ror.org/022r5hc56</idno>
          <orgName>Centre de Recherche en Automatique de Nancy</orgName>
          <orgName type="acronym">CRAN</orgName>
          <date type="start">2012-01-01</date>
          <desc>
            <address>
              <addrLine>Université de Lorraine, Campus Sciences, BP 70239, 54506 Vandoeuvre-les-Nancy Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.cran.univ-lorraine.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-413289" type="direct"/>
            <relation name="UMR7039" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-34499" status="OLD">
          <idno type="IdRef">030947448</idno>
          <idno type="ISNI">0000000121927225</idno>
          <idno type="RNSR">199511949P</idno>
          <idno type="ROR">https://ror.org/01rx4qw44</idno>
          <orgName>Institut de recherche en informatique de Toulouse</orgName>
          <orgName type="acronym">IRIT</orgName>
          <date type="start">1990-01-01</date>
          <date type="end">2025-01-01</date>
          <desc>
            <address>
              <addrLine>118 Route de Narbonne, F-31062 Toulouse Cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.irit.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-81148" type="direct"/>
            <relation name="443875" active="#struct-443875" type="indirect"/>
            <relation active="#struct-116256" type="direct"/>
            <relation active="#struct-443875" type="indirect"/>
            <relation active="#struct-217752" type="direct"/>
            <relation name="UMR5505 / URA1399" active="#struct-441569" type="direct"/>
            <relation active="#struct-448187" type="direct"/>
            <relation active="#struct-1149079" type="direct"/>
            <relation name="FED4171" active="#struct-217752" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-81148" status="VALID">
          <idno type="IdRef">026404354</idno>
          <idno type="ISNI">0000000121902837</idno>
          <idno type="ROR">https://ror.org/0443n9e75</idno>
          <orgName>Université Toulouse Capitole</orgName>
          <orgName type="acronym">UT Capitole</orgName>
          <date type="start">1970-01-01</date>
          <desc>
            <address>
              <addrLine>2 rue du Doyen-Gabriel-Marty - 31042 Toulouse Cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.ut-capitole.fr/</ref>
          </desc>
          <listRelation>
            <relation name="443875" active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-443875" status="VALID">
          <idno type="ROR">https://ror.org/017tgbk05</idno>
          <orgName>Communauté d'universités et établissements de Toulouse</orgName>
          <orgName type="acronym">Comue de Toulouse</orgName>
          <desc>
            <address>
              <addrLine>41 Allée Jules Guesde, 31000 Toulouse</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.univ-toulouse.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-116256" status="VALID">
          <idno type="IdRef">026403994</idno>
          <idno type="ROR">https://ror.org/04ezk3x31</idno>
          <orgName>Université Toulouse - Jean Jaurès</orgName>
          <orgName type="acronym">UT2J</orgName>
          <date type="start">1971-01-01</date>
          <desc>
            <address>
              <addrLine>5 allées Antonio Machado - 31058 Toulouse Cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-tlse2.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-217752" status="OLD">
          <idno type="IdRef">026404672</idno>
          <idno type="ISNI">0000000121617331</idno>
          <idno type="ROR">https://ror.org/02v6kpv12</idno>
          <idno type="Wikidata">Q1273188</idno>
          <orgName>Université Toulouse III - Paul Sabatier</orgName>
          <orgName type="acronym">UT3</orgName>
          <date type="end">2025-01-01</date>
          <desc>
            <address>
              <addrLine>118 route de Narbonne - 31062 Toulouse</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-tlse3.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-448187" status="VALID">
          <idno type="IdRef">026388820</idno>
          <idno type="ISNI">0000000121766169</idno>
          <idno type="ROR">https://ror.org/033p9g875</idno>
          <orgName>Institut National Polytechnique (Toulouse)</orgName>
          <orgName type="acronym">Toulouse INP</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.inp-toulouse.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="regrouplaboratory" xml:id="struct-1149079" status="OLD">
          <orgName>Toulouse Mind &amp; Brain Institut</orgName>
          <orgName type="acronym">TMBI</orgName>
          <date type="start">2021-01-01</date>
          <date type="end">2025-01-01</date>
          <desc>
            <address>
              <addrLine>CHU Purpan, Pavillon Baudot, 31059 Toulouse cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.tmbi.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-116256" type="direct"/>
            <relation active="#struct-443875" type="indirect"/>
            <relation name="FED4171" active="#struct-217752" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-413289" status="VALID">
          <idno type="IdRef">157040569</idno>
          <idno type="IdUnivLorraine">[UL]100--</idno>
          <idno type="ROR">https://ror.org/04vfs2w97</idno>
          <orgName>Université de Lorraine</orgName>
          <orgName type="acronym">UL</orgName>
          <date type="start">2012-01-01</date>
          <desc>
            <address>
              <addrLine>34 cours Léopold - CS 25233 - 54052 Nancy cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-lorraine.fr/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>