University of Westminster formal verification