The Process and Proof for Formal Sign-Off –A Live Case Study