Train people well enough so they can leave, treat them well enough so they don't want to.
The challenge in model checking is not just to find errors, but to understand why they occur.