Voucher System verification using TLA+