See this paper rejecting the technology for the Trident missile program.[1]  Also this harsh critique from Djkystra.[2] And this writeup on HN last year.[3]<p>I encountered HOS back when I was doing proof of correctness work, and didn&#x27;t really understand how it got beyond very simple problems. But I thought, at the time, that was my fault.  In retrospect, it&#x27;s an approach for a certain class of control problems dominated by required relationships between certain variables.  That&#x27;s what flight control systems are all about.<p>Control problems are typically expressed as a set of &quot;laws&quot;, equations which define what&#x27;s supposed to be happening given the inputs and perhaps past inputs. Some of these are equations, and others are constraints.  Checking those laws for contradictions and turning those laws into code is partially automatable, and that&#x27;s what HOS was trying to do.<p>HOS only seemed to work well with the founders driving it. Somehow, they were never able to express clearly what they were doing.  Sometimes that happens.  Norm Hardy, who came up with capability-based systems and created KeyKos, a capability-based OS for IBM mainframes, had that problem. The system worked great, but nobody understood what he was doing.  He used to have an &quot;explainer&quot;, Susan Rajunas.  In both cases, the startups went bust.<p>Trying to get people to understand a complex formal system is very hard. Harder than developing one.<p>[1] <a href="http:&#x2F;&#x2F;www.dtic.mil&#x2F;dtic&#x2F;tr&#x2F;fulltext&#x2F;u2&#x2F;a198753.pdf" rel="nofollow">http:&#x2F;&#x2F;www.dtic.mil&#x2F;dtic&#x2F;tr&#x2F;fulltext&#x2F;u2&#x2F;a198753.pdf</a>
[2] <a href="https:&#x2F;&#x2F;www.cs.utexas.edu&#x2F;users&#x2F;EWD&#x2F;transcriptions&#x2F;EWD08xx&#x2F;EWD852.html" rel="nofollow">https:&#x2F;&#x2F;www.cs.utexas.edu&#x2F;users&#x2F;EWD&#x2F;transcriptions&#x2F;EWD08xx&#x2F;E...</a>
[3] <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=8736450" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=8736450</a>