https://123dok.net/document/qo557lmy-formal-specification-and-automated-verification-of-railway-software-with-frama-c.html