Anfonwch hwn fel neges destun: Proving safety with trace automata and bounded model checking