Text this: Theoretical and Practical Aspects of SPIN Model Checking