Modeling and Verification of Keeta's Consensus [pdf] — Blankdot