Property Specifications: Users can specify assertions using the assert(expr) statements. An assert statement is used to check if the property specified by the expression expr is valid within a state. If expr evaluates to 0, this implies that it is not valid and SPIN will exit with the error. The user can also use LTL formulas to specify general correctness requirements (e.g., temporal properties).