Publication | Open Access

Formally verifying human–automation interaction as part of a system model: limitations and tradeoffs