Before revision:  We formally analyze the safe separation and liveness properties of  the protocol.
After revision:  Next, we show how to use an ensemble of existing simulation and formal verification tools to analyze the protocol including (1) formally proving the safe separation and liveness properties of the protocol.