Deductive formal verification of embedded systems