Formal Verification of Software — Blankdot