With the adoption of efficient low-thrust propulsion methods, the probabil- ity of a missed thrust event occurring has become a significant concern for short and long-duration missions. If the missed
Software systems cannot in general be assumed proven correct before deployment. Testing is still the most common approach to demonstrate a satisfactory level of correctness. However, some errors will
