Element 'program formal verification'