Visible to the public Formal Dependability Analysis for Real-Time Medical Devices