I tried that once at a small piece of code, however the problem was that there was no way to verify the code implemented what the proof said about it.