E3 Model-Based Design and Verification for Embedded Systems