Safety verification of hybrid systems by constraint propagation based abstraction refinement
What's decidable about hybrid automata?