A computer-checked verification of Milner's scheduler door H.P. Korver