Verifying the interactive convergence clock synchronization algorithm using the Boyer-Moore theorem prover | lit.salon