Formal verification and analysis