Towards Automatic Verification of Safety Architectures Carsten Schürmann Carnegie Mellon University April 2000.