goto Done in your PlusCal algorithm, even if there is no explicit label Done: ... Also, if it is irrelevant for your algorithm, there is no need to check the Termination property that the PlusCal translator generates: it is perfectly reasonable to verify some specific temporal property that expresses that your algorithm has terminated. Stephan |