Limitations (cont.)
MR generates a sequence of recovery actions, but there is not a tight feedback loop between MR commanding and MI monitoring.
- MR produces task net E.g., close(valve); turn-off(driver) where proc close(valve) unless on(driver) turn-on(driver); send(driver,close-valve);
Model-based Reactive Execution