An experiment in automatic verification of programs

How effective is a compiler at replacing explicit verification, and what is the cost of this technique?