IA169 Model Checking