Robot control specification and verification