Title: Proof of fault coverage for a formal protocol test procedure