[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[tlaplus] Re: Proving false with fairness

Thank you for your precise explanation.

In the first case, I did not plan to write a non machine closed specification : it was a typo in a formula that was responsible for it.

For the second case, during my 15+ years of using TLA+, I had used Constraint almost only with invariant properties. I was aware that a invalid safety property could be reported as valid (as less states are explored) or that a valid liveness property could be reported as invalid (if the relevant states were excluded). I hadn't stopped to think that an invalid liveness property could also be reported as valid, my mistake. I guess I had forgotten about Section 14.3.5 (Limitations of Liveness Checking).

You received this message because you are subscribed to the Google Groups "tlaplus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tlaplus+unsubscribe@xxxxxxxxxxxxxxxx.
To post to this group, send email to tlaplus@xxxxxxxxxxxxxxxx.
Visit this group at https://groups.google.com/group/tlaplus.
For more options, visit https://groups.google.com/d/optout.