Background In safety-critical systems, testing cannot prove the absence of errors. Formal verification uses mathematical …