Describir: Contextualizing formal verification for systems security engineering