Seconded. Regarding applying SPARK, the Tokeneer case-study is an interesting read. It's self-published by AdaCore.

This summary page links to the full PDF: https://www.adacore.com/tokeneer