“…The monitoring of model execution is done by observing events like signal outputs, operation calls or returns, state changes, etc., or by observing the state of the system, like attribute values, contents of queues, states of the state machines, etc. 5 We take for example the following property: This property is based on a pure black-box view of the software. Nevertheless, since several components are involved in aborting the lift-off, the designers have completed the property with the requirement that the internal events Request EAP Preparation and Request EAP Release are never emitted.…”