FromNuSMVtoSPINExperienceswithmodelchecking