Verification of concurrent systems in SML