Model Checking Java Programs With Guild