Formal Methods Project 2: Modeling shared, mutable state in a concurrent application