Gravar-mail: Certification of open-source software : a role for formal methods?