Email Record: Verification of transaction level models of embedded systems /