What Is Model Checking Example