article about modelchecking with spin modelchecking