Alvis models of safety critical systems state-base verification with nuXmv | IEEE Conference Publication | IEEE Xplore