Model checking for the PX4 autopilot.