Seol mar théacs é seo: Formal Verification of a Clock Synchronization Method in a Distributed Automotive System