Model Checking of Autonomy Models for an In-Situ Propellant Production System. - Peter Engrand; Charles Pecheur (FAABS, 2000)