model checker can now bypass ROS