Formal verification

Formal verification