Principles of Verifiable RTL Design