Testing with model checkers: a survey | Synapse