Formal Methods for Industrial Critical Systems door