Formal modelling and verification of a multi-agent negotiation approach for airline operations control