Text this: Theoretical and practical aspects of SPIN model checking :