Space Flight Center -- Formal Verification of Autonomy Models.