4 ms·

Thanks for the info. What theorem prover did you use and how do you convert the security rules to a format that the prover understands?