Building specifications for perception systems : formal proofs of deep networks trained with simulators