Describir: Principles of model checking