Cross--layer Formal Verification of Robotic Systems