Verify dekker's algorithm with SPIN