DEFAULT

Principles of the spin model checker