Safety via state transition language plus invariants | IEEE Conference Publication | IEEE Xplore