NASA NTRS2012Proof or Consequences the Verification of Curiosity's SoftwareNo abstract availablelogic model checking↗