Grant Agreement: 644047Grant Agreement • December 8th, 2017
Contract Type FiledDecember 8th, 2017system properties. Assuming that a formula ϕ describes the desired sys- tem property, the model checking problem amounts to checking whether the combined formula