Email Record: Formal verification of Simulink/Stateflow diagrams