A Model-Checking Approach to Analyse Temporal Failure Propagation with AltaRica
This model, tailored to study failure propagation, is comprised of: two external functions, I1 and I2, that have no input (so, in their nominal state, the output is set to Ok); two