Promela datamodel