Formal Verification of Transmission Window Timing for the Time-Triggered Architecture

We formally verify the parameters on the timing of message windows in transmitters, receivers, and bus guardians for the Time-Triggered Architecture.