Title: Validating Requirements for Fault Tolerant Systems Using Model Checking