Causal models for analysis of TCAS-induced collisions