A formal approach to discrepancy generation for systematic testing of execution monitoring algorithms in simulation | IEEE Conference Publication | IEEE Xplore