Title: Verification of the Ftcayuga Fault-Tolerant Microprocessor System - A Case Study in Theorem Prover-Based Verification