With the head of dvsim (version 1.7.0), I just tried to run this OpenTitan command:
dvsim ../opentitan/hw/top_earlgrey/formal/top_earlgrey_fpv_sec_cm_cfgs.hjson --select-cfg=aes_masked_sec_cm --gui
It doesn't work, and the problem is that Deploy treats a variable called sim_cfg as probably containing a SimCfg object (quite reasonable!). In this example, sim_cfg is actually of type OneShotCfg, which is a different subclass of FlowCfg.
I think the root problem that causes the failure is the change in 6938d34. This is completely reasonable, so long as sim_cfg is a SimCfg object. But it isn't...
At the moment, I don't think we can run formal tests with out-of-tree dvsim.