https://123dok.net/document/zx53r1xw-electrum-analyzer-model-checking-relational-order-temporal-specifications.html