Formal Methods in Use at Galois