改变始于一小步,但需要集体的努力才能使其持久。
"Model checking is a powerful technique for verifying the correctness of finite-state concurrent systems."