A formal approach supporting the comparative predictive assessment of the interruption-tolerance of interactive systems