CIS 842: Specification and Verification of Reactive Systems Lecture SPIN-Soldiers: Soldiers Case Study Copyright 2001-2002, Matt Dwyer, John Hatcliff,