Promela model and collaborations into
sets of Büchi automata (``never claims''). The model checker
Spin is called upon to verify the model
against the automata.
@Article{schaefer:model-checking-uml,
author = {Timm Sch{\"a}fer and Alexander Knapp and Stephan Merz},
title = {Model checking {UML} state machines and collaborations},
journal = {Electronic Notes in Theoretical Computer Science},
year = 2001,
volume = 55,
number = 3,
pages = {13 pages}
}