Model Checking

TODO