Anfonwch hwn fel neges destun: Formal Verification of a Clock Synchronization Method in a Distributed Automotive System