We will model all of the features of the implementation Controller class (Chapter 3,
Section 3.1).
We must also model the controller’s environment: the timer, sensor, and supervisor
(Chapter 3, Figure 3.1). This is necessary in order to model events realistically. In
our sandbox implementation, simulated events were generated by the user (through
the Simulator class, Figures 3.5 and 3.6) or by the test fixture (Figure 3.7). In the
model, we cannot use a .NET timer as we did in the simulator, because the time-out
events must be scheduled by the tools.