I’ve checked the numbers – the verification cost is pretty hefty, but the reduction in attack surface is hard to ignore. Start by formalising the core state‑transition logic, not the whole stack, and build a reusable library. That way you keep the overhead manageable while still reaping the security upside.