start model checking