Model Checking Abstract State Machines | lit.salon