Model checking - still not finished