Common Criteria Compliance for the Trusted Filter at EAL7 - Formal Arguments