modelled bounded CB

* introduced non-determinism to the abstract append automaton
* more complex use of counters in the concrete append and safety automata
distilled example with counters
fixed up the counters example
structure the spec/ directory
diagrams for a more complete Eth model (wip)
wip