SafeCap Domain Language for Reasoning about Safety and Capacity | IEEE Conference Publication | IEEE Xplore