I would have expected them to use SCADE, but given their choice of stacks that are entirely unverifiable, due to a combination of their complexity and their sem

I would have expected them to use SCADE, but given their choice of stacks that are entirely unverifiable, due to a combination of their complexity and their semantics, I can only assume that "control panel" was basically decorative, and that actual critical functions and alerts were handled by something with much, much higher safety assurances.