Automatically generating specification properties from task models for the formal verification of human-automation interaction