Pipelined Moonshot consensus protocol's safety is formally verified using IVy, ensuring the absence of design or logic errors.
