Added clarification ERTMSFormalSpecs <--> SysML relationship