improve section on formal verification