Model synergy_bad¶
Cited in: [GulavaniHKNR06] fig. 9 p. 9.
Tag: termination.
Figure¶
Source code¶
model gulavani_henzinger_kannan_nori_rajamani_sigsoft06_09 {
var x, y;
states q;
transition t := {
from := q;
to := q;
guard := y >= 0;
action := y' = y + x;
};
}
strategy gulavani_henzinger_kannan_nori_rajamani_sigsoft06_09_s {
Region init := {state = q && x = 0 && y = 0};
}
Expected invariant¶
{ q[0, 0] }
Results¶
- With Aspic: { q[0, 0] } (0.22s), OK.
- With ISL: { q[0, y__1] : y__1 >= 0; q[0, 0] } (0.01s), failed.