presented at event 24th International Conference on Formal Techniques for Networked and Distributed Systems Conference