Mokhov, Lukyanov, Lechner, 2018. Formal Verification of Spacecraft Control Programs Using a Metalanguage for State Transformers.