Model-Checking Plus Testing: From Software Architecture Analysis to Code Testing