Promela
model and collaborations into
sets of Büchi automata (``never claims''). The model checker
Spin
is called upon to verify the model
against the automata.
@Article{schaefer:model-checking-uml, author = {Timm Sch{\"a}fer and Alexander Knapp and Stephan Merz}, title = {Model checking {UML} state machines and collaborations}, journal = {Electronic Notes in Theoretical Computer Science}, year = 2001, volume = 55, number = 3, pages = {13 pages} }