add guards to prove invariants
add on_track invariant to machine
more work on safety criteria
Merge branch 'master' of https://github.com/openETCS/model-evaluation
started different modeling approach for communication model