"The challenge in formal verification is to bridge the gap between the abstract models and the actual implementations."