真相往往比我们告诉自己的故事更复杂。
"Model checking is a powerful technique for verifying the correctness of finite-state concurrent systems."