[tlaplus] Re: Proving false with fairness

[philippe.queinnec.pro@xxxxxxxxx]

Thank you for your precise explanation.

In the first case, I did not plan to write a non machine closed specification : it was a typo in a formula that was responsible for it.

For the second case, during my 15+ years of using TLA+, I had used Constraint almost only with invariant properties. I was aware that a invalid safety property could be reported as valid (as less states are explored) or that a valid liveness property could be reported as invalid (if the relevant states were excluded). I hadn't stopped to think that an invalid liveness property could also be reported as valid, my mistake. I guess I had forgotten about Section 14.3.5 (Limitations of Liveness Checking).

-- 
You received this message because you are subscribed to the Google Groups "tlaplus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tlaplus+unsubscribe@xxxxxxxxxxxxxxxx.
To post to this group, send email to tlaplus@xxxxxxxxxxxxxxxx.
Visit this group at https://groups.google.com/group/tlaplus.
For more options, visit https://groups.google.com/d/optout.