Systems that know what they are doing : A Model-Based Formal Specification for Robust Autonomy | Publicación