SAE/TP 2009-01-3209 (PDF) Model-Based Design and Automatic Production Code Generation for Safety-Critical Software Development