DO-178C Workflow with Qualified Code Generation Note: Formal Methods allow to detect errors in the Model including dead logic, integer overflow, division by zero, and violations of design properties and assertions, out-ofbounds array access and certain other run-time errors in source code