Formal verification; Abstract state machines; Multiway decision graphs; Model checking