Formal Proofs Used on the NYCT Flushing Line CBTC Project
tools.clearsy.com