Applying the Four-Eyes Principle to RISC-V Processor Verification by Equivalent Program Execution