TOWARDS TRACTABLE METHODS FOR FORMAL VERIFICATION OF AUTONOMY IN AEROSPACE SYSTEMS