Before revision:  We formally analyze the safe separation and liveness properties of  the protocol.
After revision:  We formally analyze the safe separation and liveness properties of distributed coordination with the help of proof assistants Dione and Dafny, (2) using data-driven reachability analysis with DryVR to ensure aircraft to follow operation volumes, and (3) evaluating the protocol.