Text this: Using SPIN to Check Simulink Stateflow Models