How we continuously validate formal specifications in production