CompCert would be a good example, but everything I have done professionally is also stable; with exclusively people like me, bug tracking systems would not need to exist.

I also have made some software that is proven (meaning from a small 500 line proof kernel) to be correct relative to a trivial implementation (and yes, full correctness is difficult to achieve).