model checker ...
bugs and improvement in MC