Towards a Formally Verified Security Monitor for VM-based Confidential Computing (Full Report)