Formal Verification of Top-Down Parser Interpreters