Formal Methods for the Validation of Fault Tolerance in Autonomous Spacecraft. - S. Ayache; Eric Conquet; Philippe Humbert; Carlos Rodríguez; Joseph Sifakis; R. Gerlich (FTCS, 1996)