Formal Verification for Autopilot – Preliminary state of the Art