Run-Time Risk Mitigation in Automated Vehicles: A Model for Studying Preparatory Steps
Proving the Correctness of Multiprocess Programs