Correct-by-construction code generation from hybrid automata specification | IEEE Conference Publication | IEEE Xplore