Model-Checking plus Testing: from Software Architecture Analysis to Code Testing