"The key to successful verification is to start with a clear and precise specification of what the system is supposed to do."