Model checking

button is pressed, the cabin will eventually stop at the nth floor and open the door"Between the time an elevator is called at a floor and the time it opens its doors at that floor, the elevator can arrive at that floor at most twice

Model-checking tools face a combinatorial blow up of the state-space, commonly known as the state explosion problem, that must be addressed to solve most real-world problems. There are several approaches to combat this problem.