LTL Model Checking

As pointed out in Section 1.4, given a Maude system module, we can distinguish two levels of specification: a system specification level, provided by the rewrite theory specified by that system module which defines the behavior of the system, and a property specification level, given by some property (or properties) φ that we want to state and prove about our module.