Formally verifying dynamic properties of KBS