A note on inconsistent axioms in Rushby's "systematic formal verification for fault-tolerant time-triggered algorithms" | IEEE Journals & Magazine | IEEE Xplore