https://123dok.org/document/myjwgwpq-a-model-checking-approach-for-verifying-cows-specifications.html