formal verification tutorial