The Spin Model Checker by Gerard Holzmann