Adding formal specifications to a proven V&V process for system-critical flight software | IEEE Conference Publication | IEEE Xplore