Formal RTL Sign-off with Abstract Models