Formal methods for the validation of fault tolerance in autonomous spacecraft | IEEE Conference Publication | IEEE Xplore