Problems with Classical Model Checking Closed system assumption – might succeed trivially, b/c data not visible – might fail inaccurately, b/c future path not known – assumes fixed definition of terms (Jo's talk) Data values ascribed by states, not flows Binary result doesn't distinguish between false and don't know suggests 3-valued verification
{}