Verification of Self-x Mechanisms by Verified Result Checking3 Example