Formal verification and validation of a movement control actor relocation algorithm for safety–critical applications