135 model-checking "DIFFER" PhD positions