Text this: SPIN Model Checking and Software Verification