added reference to modelchecking