PSEModelChecker: P operators with bounds.