Formal verification for Agent IR.
Given a state S and proposal P, you can:
- verify: Prove P is satisfiable in S without executing
- simulate: Compute expected final state S' without tools
- equivalent: Show two proposals produce identical state
- optimize: Reorder actions provably safely