Promela SPIN example, http://spinroot.com/spin/Doc/SpinTutorial.pdf