Formal design of safety-critical systems with MARS | Synapse