Title: CIP model-checking