Formal verification of the S-two AIR | ArxivCSExplorer