Formal verification doesn't imply waterfall.