Proving safety properties of the Steam Boiler Controller: Formal methods for industrial applications: A case study
