Principles of the Spin Model Checker door Mordechai Ben-Ari