SHOLIS Analysis
Most bugs found by testing
Z Proof most efficient validation phase
(most faults per day on project)
Fixing bugs at this stage is easier
Overall experience positive
Less work on proofs than expected
Delivered quality product