How model checking can help build trust in the design of distributed protocols | Ethereum Foundation | Podwise