promela: ltl claims and running constraints for priority scheduling