Preventing billion dollar coding errors with scalable formal verification