Static Verification Of Concurrent System Design