Model Checking for Closed-Loop Robot Reactive Planning