The challenge in model checking is not just to find errors, but to understand why they occur.