A formal proof of the Deadline Driven scheduler