reviewed Ch.3 "formal verification..."