Optimizing proof test policy for redundant safety-related systems