Formal Design and Safety Analysis of AIR6110 Wheel Brake System