Model Checking Java Programs With Guitars