It is really not that difficult. Here is a paper that formalizes a version of feed forward networks to prove properties about them.
But that's the actual problem we're trying to solve; nobody really doubts Kalman's proof of his filter's optimality.
So this paper is not a relevant answer to the question, "how would you prove an implementation of a Kalman filter is correct?"
So you would probably adopt some conservative approach in which you showed that the worst case floating point rounding error is << some quantile of error due to the data.
But, I think specialised tools are more commonly used than general process. Eg, see https://github.com/arpra-project/arpra