From: Towards a Verification-Driven Iterative Development of Software for Safety-Critical Cyber-Physical Systems
Property
Assertion 1: (! (!door.isDoorClosed && door.isDoorLocked))
Assertion 2: (! (train.isRun && !door.isDoorLocked))
Assertion 3: (! (train.isRun && !door.isDoorClosed))