Principles of the Spin Model Checker by Mordechai Ben-Ari