Seol mar théacs é seo: Proving safety with trace automata and bounded model checking