Model-Based Dependability Analysis of Physical Systems with Modelica

Figure 5

After 150 seconds, the status of ControlLevel and LimitInFlow requirements changes to violated.