A verifiable, autonomous satellite control system | IEEE Conference Publication | IEEE Xplore