I suggest adding an auxiliary variable, let's call it `progress', initialized to "none" and that gets updated to "A" by action A etc. Then verify the invariant
progress = "C" => ~ ENABLED Next
You received this message because you are subscribed to the Google Groups "tlaplus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tlaplus+unsubscribe@xxxxxxxxxxxxxxxx.
To view this discussion on the web visit https://groups.google.com/d/msgid/tlaplus/24AE7BBB-038E-423D-9537-85281D4B45C9%40gmail.com.