Knowing nothing about P or modeling distributed systems, I wish the author had shown their code and an example of how the model checker found the problem.