AADL model transformation for formal verification