Russinoff D. Formal verification of floating-point hardware 2022