結果 : model checking case study in software engineering