Local Causal Reasoning of a Safety-Critical Subway System | IEEE Conference Publication | IEEE Xplore