https://www.cwblogs.com/posts/Explicit-State-Model-Checking/