update README for formal specification submission