Model Checking, Tla Plus, TLC, Java, Concurrency.
trace is available here.) Limitations of Model-Checking Of course, if things always worked nicely like this, model checking would be taught in elementary school. As a technique, model checking suffers from a severe liability known as state explosion. (Technically, state space explosion is a better