Lesson Learned

• Using extra proctype in hopes of increasing partial-order reductions didn’t work
• Using SPIN to model existing C works
• Good doc fixes bugs
• SPIN & Promela need some work