Promela model for process_is_running