Model Checking, Tla Plus, TLC, Java, Concurrency.
basically the same thing). Note also that the third source of nondeterminism may not exist in the Java program (producers tend to produce specific elements) and is irrelevant anyway. The other two sources of nondeterminism are the ones that complicate the analysis of the system and lead to