Limitations
• Can’t model all of TCAS
– Pushing limits of SMV (more than 200 bit
variables is problematic)
– Need some non-linear arithmetic to model parts
of Other_Aircraft
• New result that represents constraints as BDD
variables and uses a constraint solver
• How to pick appropriate formulae to check?