We used the SCR* toolset to develop the SCR
Specification of the required ASW behavior and to
analyze the specification for desired properties.
The analysis tools that we applied were the
consistency checker and the simulator. We
performed the analysis in two stages. First, we used
the tools to analyze the SRS, i.e., the ideal system
behavior. Once we had confidence in the quality of
this specification, we added the refinements and
extensions described above -- the input and output
variables and the extensions to the specification to
report hardware malfunctions.