Model checking
A model checker takes as input the state machine description and a temporal logic formula and
- either returns “true” or
- returns “false” and gives a counterexample
- a description of state transitions that leads to a counterexample of the temporal formula