“…However, because they are extremely good at finding unexpected problems with interactions between components in complex environments, a growing body of research has been investigating how formal methods (and especially model checking) can be used in human factors engineering (Bolton, Bass, & Siminiceanu, 2013;Weyers, Bowen, Dix, & Palanque, 2017) to find problems in human-automation and human-human interaction. These works have predominantly focused on analyzing the usability of human-machine and human-computer interfaces (Abowd, Wang, & Monk, 1995;Campos & Harrison, 2008;Pa-ternò, 1997); finding potential mode confusions and automation surprises (Bredereke & Lankenau, 2002;Campos & Harrison, 2011;Degani, 2004;Degani & Heymann, 2002;Joshi, Miller, & Heimdahl, 2003;Rushby, 2002); assessing the impact of normative human task behavior on system safety (Aït-Ameur & Baron, 2006;Bolton, Siminiceanu, & Bass, 2011;Houser, Ma, Feigh, & Bolton, 2015;Paternò & Santoro, 2001); assessing the impact of human errors included (Bastide & Basnyat, 2007;Fields, 2001) or generated (Bolton, 2015;Bolton, Bass, & Siminiceanu, 2012;Pan & Bolton, 2016) in task analytic behavior models; or having problems arise organically from cognitive or perceptual models (Cerone, Lindsay, & Connelly, 2005;Hasanain, Boyd, & Bolton, 2015;Hasanain, Boyd, Edworthy, & Bolton, 2017;Rukšėnas, Curzon, Back, & Blandford, 2007).…”