In TLA jargon, it's a "variable". In contrast to a "constant", whose value is fixed by the model, independently of the state, variables may be assigned different values in different states. Thus, your formula is valid if x and y are declared as CONSTANTS, but not if at least one of them is a VARIABLE. Stephan |