I believe conflicting rules would either result in no behaviors (equivalent to FALSE, i.e. you can verify Spec => FALSE) or in a deadlock, which you can detect with liveness. But the main idea is to express the specification not as a state machine, but as a conjunction of state machines, each corresponding to a rule ("conjoined specifications"). Not generally recommended, but might be useful.
On Wednesday, May 1, 2019 at 1:23:59 AM UTC+1, Jay Parlar wrote:
Thanks, I’ll take a closer look tomorrow. Does this have some mechanism for detecting inconsistent/conflicting rules?