Experience with formal methods in critical systems | IEEE Journals & Magazine | IEEE Xplore