Auto-generating test sequences using model checkers