The HOL verification of ELLA designs