Bda 2019 Lecture 8.1 Model Checking