“…Temporal logics like LTL ( Pnueli, 1977 ), for linear behaviour, and CTL ( Clarke & Emerson, 1981 ), for branching behaviour, have been successfully used to specify sequential and concurrent systems, and have been widely adopted in many industrial contexts: see, e.g . ( Eisner & Fisman, 2016 ) or the success stories of the model checkers SPIN ( Holzmann, 2004 ) and nuSMV ( Cavada et al, 2014 ). Although LTL and CTL model-checking procedures are known to be quite expensive, since they incur in the so-called “state-space explosion” problem, the use of techniques based on decision diagrams allows, in many cases, to solve industrial-size systems ( Burch et al, 1992 ).…”