formal verifications