[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [tlaplus] Re: How does TLC expand search?



Hi Shiyao
related code:
VoteFor(a, b, v) ==
   
/\ maxBal[a] =< b
    /
\ \A vt \in votes[a] : vt[1] /= b
   
/\ \A c \in Acceptor \ {a} :
         
\A vt \in votes[c] : (vt[1] = b) => (vt[2] = v)
   
/\ \E Q \in Quorum : ShowsSafeAt(Q, b, v)
   
/\ votes'  = [votes EXCEPT ![a] = votes[a] \cup {<<b, v>>}]
    /\ maxBal'
= [maxBal EXCEPT ![a] = b]

If VoteFor specifies maxBal', and IncreaseMaxBal specifies maxBal', then they can only be true that the same time if there is some value for maxBal' that satisfies both actions.

Given TLC isn't giving you an error, I'm guessing you also have UNCHANGED votes in IncreaseMaxBal? Then they definitely both can't be true at the same time, as VoteFor would specify that votes changes and IncreaseMaxBal does not.

H



--
You received this message because you are subscribed to the Google Groups "tlaplus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tlaplus+unsubscribe@xxxxxxxxxxxxxxxx.
To view this discussion on the web visit https://groups.google.com/d/msgid/tlaplus/a970adcf-3791-4835-b6c8-ac024b5c9cef%40googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "tlaplus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tlaplus+unsubscribe@xxxxxxxxxxxxxxxx.
To view this discussion on the web visit https://groups.google.com/d/msgid/tlaplus/277f303e-5cfe-8607-6789-99686a50099c%40gmail.com.