Research

My work is in formal methods and software engineering. It concentrates on three directions, each listed below with the papers that belong to it.

Property refinement and specification debt

Formal specifications grow with every design iteration, and many temporal properties end up implied by others. I develop property refinement for Linear Temporal Logic (LTL) and Computation Tree Logic (CTL): a semantic relation that identifies redundant or subsumed properties and computes a minimal sufficient set to model-check, reducing verification effort and exposing dependencies between requirements.

Refinement is defined by trace inclusion with a non-emptiness condition, so that unsatisfiable properties cannot trivially replace weaker ones. The analysis works on the properties alone, before a system model exists, and fits between requirements formalisation and model checking in the verification workflow.

Publications

  1. Property Refinement in Computation Tree Logic

    Luca Brodo, Giuseppe Scalora, Stefan Henkler

    CAIESA 2026 Workshop

  2. Property Refinement in Linear Temporal Logic: Formal Semantics and Algorithms for Software Verification

    Luca Brodo, Giuseppe Scalora, Stefan Henkler

    FSE 2026

  3. What Do We Really Need? Identifying Minimal Sufficient Temporal Properties via Refinement

    Luca Brodo, Giuseppe Scalora, Stefan Henkler

    ICSE 2026 Companion

Tutorials

  1. Detecting redundant LTL requirements with Spot

    Tutorial 24 min read

    An introduction to LTL property refinement, with a Python example that checks implication and equivalence and identifies which requirements need separate verification.

Timed refinement for evolving real-time systems

Post-deployment updates to real-time and safety-critical systems must preserve what was verified before. With Relaxed Weak Timed Bisimulation (RWTBS), updates are checked compositionally: output deadlines are preserved strictly while input reception may be relaxed in a controlled way. Building on this, I study correct-by-construction evolution of digital twins.

Classical timed refinement relations require identical timing for every observable event and therefore reject updates such as buffering or asynchronous communication that keep all output deadlines. RWTBS captures this asymmetry between output obligations and input flexibility and is decided by a zone-based symbolic algorithm over timed automata.

Publications

  1. Asymmetric Timed Refinement for Correct Post-Deployment Updates in Real-Time Systems

    Luca Brodo, Giuseppe Scalora, Stefan Henkler

    MEMOCODE 2026AcceptedBest Paper Award

  2. Correct-by-Construction Evolution of Digital Twins for Real-Time Autonomous Systems

    Luca Brodo, Giuseppe Scalora, Stefan Henkler

    ASYDE 2026 Workshop

Self-adaptive and socially compliant autonomous systems

Autonomous systems must adapt at runtime and behave acceptably around people. I work on runtime self-optimization that keeps exact optimality through knowledge-driven design space reduction, and on verifying social norms alongside safety and liveness with reusable (T)CTL observer patterns.

Application scenarios include smart-farming drones and autonomous transport, where operating conditions change after deployment and systems share space with workers, residents and traffic.

Publications

  1. Bridging Social and Technical Compliance in Autonomous Systems through a Standardized Pattern Catalog

    Luca Brodo, Giuseppe Scalora, Lukas Walter, Stefan Henkler

    MODELS 2026 Companion

  2. Runtime Self-Optimization Through Knowledge-Driven Design Space Reduction

    Luca Brodo, Giuseppe Scalora, Stefan Henkler

    SEAMS 2026

  3. Towards a Digital Twin Framework for Secure and Efficient Cyber-Physical Transportation Systems

    Luca Brodo, Giuseppe Scalora, Stefan Henkler

    MoVe4SPS 2025 Workshop