TLC is not checking these fairness conditions, since they are part of the specification and therefore assumed. Also, as long as you are only checking invariants it doesn't matter if you add the fairness assumptions to the spec or not as they do not influence whether a state is reachable or not.StephanDear allFrom ToolBox help, we can get that when run in distributed mode, TLC cannot check liveness properties.For my spec, I just check the invariants for each states instead of liveness propertiesfor every possible behavior.But I also need to add Weak Fairness statements for sevral key actions to make surethey will eventaully always enabled.TCFSFairSpec == TCFSSpec /\ WF_vars(TCFSClientNext) /\ WF_vars(Server_Down) /\ WF_vars(Server_Reboot)Because according to TLA+'s grammar, WF and SF statements are also some kind of liveness expressions, so I wonder if they can work properly as in stand-alone mode?Thanks in advance--
You received this message because you are subscribed to the Google Groups "tlaplus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tlaplus+u...@xxxxxxxxxxxxxxxx.
To view this discussion on the web visit https://groups.google.com/d/msgid/tlaplus/7de4a963-fd6f-4790-85c0-594973aa8d19n%40googlegroups.com.