SMS: Principles of Model Checking