by Safety-Critical Systems Symposium (9th 2001 Bristol, England), England) Safety-Critical Systems Symposium 2001 (Bristol, Felix Redmill, Tom Anderson