Workshop on the SPIN Verification System (2nd 1996 Rutgers University)