Manually performed program proofs are likely to have more errors in the proof than in the program
Therefore only automatic program proofs will improve our confidence