The challenge in model checking is not just to find errors, but to understand why they occur.
残酷的不是这个世界,而是世界里的人。