“It is possible to formally verify code from high-level C code, through the GCC compiler, and down to the Verilog hardware implementation.”