[Untested] Model and model checker for Rust-like attribute.