#computational tree logic #temporal logic #formal methods #model checking