model checker fix