Formal Specification and Mechanical Verification of SIFT: A Fault-Tolerant Flight Control System | IEEE Journals & Magazine | IEEE Xplore