Since the lengths of the channels are unbounded, you will need to introduce a state constraint (Model -> Advanced Options -> State Constraint) so that TLC disregards states in which the channels are too long. Cf. predicate LenConstraint in the TLA+ module. Stephan
--
You received this message because you are subscribed to the Google Groups "tlaplus" group. To unsubscribe from this group and stop receiving emails from it, send an email to tlaplus+unsubscribe@xxxxxxxxxxxxxxxx. To post to this group, send email to tlaplus@xxxxxxxxxxxxxxxx. Visit this group at https://groups.google.com/group/tlaplus. For more options, visit https://groups.google.com/d/optout. |