https://9dok.net/document/q5m0n8d3-geilmann-dual-engine-early-analysis-critical-systems.html