prove microcode by building symbolic simulation in an APL like language based on bit arrays, then proving theorems about symbolic simulation against the actual bit array describing the microcode. i.e. execute the specifications and execute the low level instructions and see if they match. some thing like that anyway