---- MODULE simple ----
CONSTANT U
VARIABLE S
Init == S \subseteq U
Add == \E x \in U \ S: S' = S \cup {x}
Rem == \E x \in S: S' = S \ {x}
Next == Add \/ Rem
=======
Checking this with TLC yields the error:
In evaluation, the identifier S is either undefined or not an operator.
On the other hand, if I express Init like this instead:
Init == S \in SUBSET U
then TLC succeeds.
What is the reason that \subseteq results in a TLC error but \in SUBSET succeeds? I thought they were semantically equivalent.
Thanks,
Lorin