Author: England) Safety-Critical Systems Symposium 2001 (Bristol