This paper reports the results of specifying, verifying and implementing the steam boiler problem with Lustre. The model is detailed and is able to drive the system and takes device failures (pumps, pump controllers, water, steam and transmission) and emer ...
Springer-Verlag1996