Visitors: Models validation: Promela and Spin