Spacecraft Early Design Validation using Formal Methods