“…Even with this limitation, model checking has demonstrated its utility for a variety of applications, especially for computer hardware and software [64]. Researchers have used model checking to successfully find and correct human factors issues in automated systems [6,10,20,51,63] and medical systems [3, 4, 7-9, 54, 60]. However, outside of our previous efforts on alarm masking modeling and detection [11,[34][35][36], no work has used model checking to find safety problems associated with human sensation and perception.…”