Model checking works