Formal verification with Formal Land