Text this: A formal CHERI-C memory model