\begin{thebibliography}{10}

\bibitem{NUREG-0899}
{U.S. Nuclear Regulatory Commission}, ``Guidelines for the preparation of emergency operating procedures,'' Tech. Rep. NUREG-0899, U.S. Nuclear Regulatory Commission, 1982.

\bibitem{10CFR50.34}
{U.S. Nuclear Regulatory Commission}, ``{10 CFR Part 50.34}.'' Code of Federal Regulations.

\bibitem{10CFR55.59}
{U.S. Nuclear Regulatory Commission}, ``{10 CFR Part 55.59}.'' Code of Federal Regulations.

\bibitem{WRPS.Description}
``{Westinghouse RPS System Description},'' tech. rep., Westinghouse Electric Corporation.

\bibitem{gentillon_westinghouse_1999}
C.~D. Gentillon, D.~Marksberry, D.~Rasmuson, M.~B. Calley, S.~A. Eide, and T.~Wierman, ``Westinghouse reactor protection system unavailability, 1984-1995.''
\newblock Number: {INEEL}/{CON}-99-00374 Publisher: Idaho National Engineering and Environmental Laboratory.

\bibitem{operator_statistics}
{U.S. Nuclear Regulatory Commission}, ``{Operator Licensing}.'' \url{https://www.nrc.gov/reactors/operator-licensing}.

\bibitem{10CFR55}
{U.S. Nuclear Regulatory Commission}, ``{Part 55—Operators' Licenses}.'' \url{https://www.nrc.gov/reading-rm/doc-collections/cfr/part055/full-text}.

\bibitem{10CFR50.54}
{U.S. Nuclear Regulatory Commission}, ``{§ 50.54 Conditions of Licenses}.'' \url{https://www.nrc.gov/reading-rm/doc-collections/cfr/part050/part050-0054}.

\bibitem{Kemeny1979}
J.~G. Kemeny {\em et~al.}, ``Report of the president's commission on the accident at three mile island,'' tech. rep., President's Commission on the Accident at Three Mile Island, October 1979.

\bibitem{WNA2020}
{World Nuclear Association}, ``Safety of nuclear power reactors.'' \url{https://www.world-nuclear.org/information-library/safety-and-security/safety-of-plants/safety-of-nuclear-power-reactors.aspx}, 2020.

\bibitem{hogberg_root_2013}
L.~Högberg, ``Root causes and impacts of severe accidents at large nuclear power plants,'' vol.~42, no.~3, pp.~267--284.

\bibitem{zhang_analysis_2025}
M.~Zhang, L.~Dai, W.~Chen, and E.~Pang, ``Analysis of human errors in nuclear power plant event reports,'' vol.~57, no.~10, p.~103687.

\bibitem{Kiniry2024}
J.~Kiniry, A.~Bakst, S.~Hansen, M.~Podhradsky, and A.~Bivin, ``High assurance rigorous digital engineering for nuclear safety (hardens) final technical report,'' Tech. Rep. TLR-RES-RES/DE-2024-005, Galois, Inc. / U.S. Nuclear Regulatory Commission, 2024.
\newblock NRC Contract 31310021C0014.

\bibitem{katis_capture_2022}
A.~Katis, A.~Mavridou, D.~Giannakopoulou, T.~Pressburger, and J.~Schumann, ``Capture, analyze, diagnose: Realizability checking of requirements in {FRET},'' in {\em Computer Aided Verification} (S.~Shoham and Y.~Vizel, eds.), pp.~490--504, Springer International Publishing.

\bibitem{baier_principles_2008}
C.~Baier and J.-P. Katoen, {\em Principles of Model Checking}.
\newblock {MIT} Press.

\bibitem{meyer_strix_2018}
P.~J. Meyer, S.~Sickert, and M.~Luttenberger, ``Strix: Explicit reactive synthesis strikes back!,'' in {\em Computer Aided Verification} (H.~Chockler and G.~Weissenbacher, eds.), pp.~578--586, Springer International Publishing.

\bibitem{jacobs_reactive_2024}
S.~Jacobs {\em et~al.}, ``The reactive synthesis competition ({SYNTCOMP}): 2018-2021.''

\bibitem{branicky_multiple_1998}
M.~Branicky, ``Multiple lyapunov functions and other analysis tools for switched and hybrid systems,'' vol.~43, no.~4, pp.~475--482.

\bibitem{bansal_hamilton-jacobi_2017}
S.~Bansal, M.~Chen, S.~Herbert, and C.~J. Tomlin, ``Hamilton-jacobi reachability: A brief overview and recent advances,'' in {\em 2017 {IEEE} 56th Annual Conference on Decision and Control ({CDC})}, pp.~2242--2253.

\bibitem{guernic_reachability_2009}
C.~L. Guernic, ``Reachability analysis of hybrid systems with linear continuous dynamics.''

\bibitem{frehse_spaceex_2011}
G.~Frehse, C.~Le~Guernic, A.~Donzé, S.~Cotton, R.~Ray, O.~Lebeltel, R.~Ripado, A.~Girard, T.~Dang, and O.~Maler, ``{SpaceEx}: Scalable verification of hybrid systems,'' in {\em Computer Aided Verification} (G.~Gopalakrishnan and S.~Qadeer, eds.), pp.~379--395, Springer.

\bibitem{mitchell_time-dependent_2005}
I.~Mitchell, A.~Bayen, and C.~Tomlin, ``A time-dependent hamilton-jacobi formulation of reachable sets for continuous dynamic games,'' vol.~50, no.~7, pp.~947--957.

\bibitem{prajna_safety_2004}
S.~Prajna and A.~Jadbabaie, ``Safety verification of hybrid systems using barrier certificates,'' in {\em Hybrid Systems: Computation and Control} (R.~Alur and G.~J. Pappas, eds.), pp.~477--492, Springer.

\bibitem{eia_lcoe_2022}
{U.S. Energy Information Administration}, ``Levelized costs of new generation resources in the annual energy outlook 2022,'' report, U.S. Energy Information Administration, March 2022.
\newblock See Table 1b, page 9.

\bibitem{eesi_datacenter_2024}
{Environmental and Energy Study Institute}, ``Data center energy needs are upending power grids and threatening the climate.'' Web article, 2024.
\newblock Accessed: 2025-09-29.

\end{thebibliography}