...
   Checking the correct environment of "bscu1.safety"... [NOT OK]
    -- as demonstrated by the following execution sequence
Trace Description: MSAT BMC Counterexample
Trace Type: Counterexample
  -- Loop starts here
  -> State: 1.1 <-
    bscu2.faults_number = 0
    bscu1.faults_number = 1
    time_point = TRUE
    switch.Delay_between_in2_and_out = 0
    switch.Delay_between_in1_and_out = 0
    switch.Out = FALSE
    bscu2.Delay_between_pedal_and_cmd = 0
    bscu2.Valid = TRUE
    bscu2.CMD_AS = FALSE
    bscu2.Pedal_Pos = FALSE
    bscu2.fault_Command = FALSE
    bscu2.fault_Monitor = FALSE
    bscu1.Delay_between_pedal_and_cmd = 0
    bscu1.Valid = FALSE
    bscu1.CMD_AS = FALSE
    bscu1.Pedal_Pos = FALSE
    bscu1.fault_Command = TRUE
    bscu1.fault_Monitor = FALSE
    Delay_between_pedal_and_cmd = 0
  -> Input: 1.2 <-
    delta_time = f'1/2
  -> State: 1.2 <-
    time_point = FALSE
  -> Input: 1.3 <-
  -> State: 1.3 <-
    time_point = TRUE
    Checking the correct environment of "bscu2.safety"... [NOT OK]
    -- as demonstrated by the following execution sequence
Trace Description: MSAT BMC Counterexample
Trace Type: Counterexample
  -- Loop starts here
  -> State: 2.1 <-
    bscu2.faults_number = 1
    bscu1.faults_number = 0
    time_point = TRUE
    switch.Delay_between_in2_and_out = 0
    switch.Delay_between_in1_and_out = 0
    switch.Out = FALSE
    bscu2.Delay_between_pedal_and_cmd = 0
    bscu2.Valid = FALSE
    bscu2.CMD_AS = FALSE
    bscu2.Pedal_Pos = FALSE
    bscu2.fault_Command = TRUE
    bscu2.fault_Monitor = FALSE
    bscu1.Delay_between_pedal_and_cmd = 0
    bscu1.Valid = TRUE
    bscu1.CMD_AS = FALSE
    bscu1.Pedal_Pos = FALSE
    bscu1.fault_Command = FALSE
    bscu1.fault_Monitor = FALSE
    Delay_between_pedal_and_cmd = 0
  -> Input: 2.2 <-
    delta_time = f'1/2
  -> State: 2.2 <-
    time_point = FALSE
  -> Input: 2.3 <-
  -> State: 2.3 <-
    time_point = TRUE
...
