Anfonwch hwn fel neges destun: Formal methods for industrial critical systems