Designing Formally Correct Intermittent Systems