Formal verification of a set of memory management units | lit.salon