Model Checking, Tla Plus, TLC, Java, Concurrency.
Indeed, most of the research related to model checking has focused on the state explosion problem, one way or another (symbolic model checking, abstraction, …). As an illustration, consider the buffer example again with a capacity of 10 but 21 threads (11 producer and 10 consumers). This system can