So what kind of formal verification is it ? Is it proof assistant, model checking ?
And what does it verify ? It's not really clear from a first glance.
But those are also probably way harder to verify.
What kind of consistency checks (other than register state being preserved by commands that do not write to the register in question)? Is there some standard best practise?