Modeling and Verification of Keeta's Consensus [pdf]