The NuSMV model checker
