IHI ultimately decided to adopt this approach and to use AdaCore’s QGen Model Verifier for Simulink to help validate their safety-critical system. According to the IHI Technology & Intelligence ...