Validating real-time systems by history-checking TRIO specifications