Common use of Motivations Clause in Contracts

Motivations. The above works were motivated mainly to support the following three industrial deployments: • Siemens: enable Siemens to use ProB in their SIL4 development chain, replacing Atelier B for data validation (see above). • Bosch: provide animation and constraint-based deadlock detection for the Cruise Control. Indeed, proving absence of deadlocks is important to Bosch, as it means that the modelers have thought of every possible scenario. Currently, the proof obligation is so big (see above) that it is difficult to apply the provers and the feedback obtained during a failed proof attempt is not very useful. Using ProB to find concrete deadlock counterexample helps Bosch to find scenarios they have not yet thought about, and enables them to adapt the model. Once all cases have been covered, the proof of deadlock freedom can be done with ▇▇▇▇▇'▇ provers (at least that was the case for the smaller of the two models; the bigger one is still contains deadlocks and is being improved). • SAP: provide a way to generate test cases using constraint-based animation; for more details see the description of the Model-based testing work[8] .