Formal Methods for Analyzing the Completeness of an Assertion Suite against a High-Level Fault Model