f verification in Models