Verifying behavioral properties