FDIR Architectures for Autonomous Spacecraft: Specification and Assessment with Event-B