Safety-Critical Java Level 2 : Applications, Modelling, And Verification