🌳 Formal Verification of Low-Trust Architectures