Verifying Emergent Properties of Swarms