A Fully Verified Executable LTL Model Checkerby Javier Esparza, Peter Lammich, René Neumann, Tobias Nipkow, Alexander Schimpf and Jan-Georg Smaus28 May