Formal Verification of Emergent Properties