Skip to content
This repository has been archived by the owner on Apr 23, 2023. It is now read-only.

Commit

Permalink
v03b10: The refinement EWD => ATD WF_vars(DetectTermination)
Browse files Browse the repository at this point in the history
  • Loading branch information
lemmy committed Feb 14, 2022
1 parent 0b94d89 commit 310ae85
Showing 1 changed file with 8 additions and 1 deletion.
9 changes: 8 additions & 1 deletion AsyncTerminationDetection.tla
Original file line number Diff line number Diff line change
Expand Up @@ -330,7 +330,14 @@ F ==
\* * It is convention to name the behavior spec Spec .
Spec ==
\* * F has been inlined because of https://github.com/informalsystems/apalache/issues/468#issuecomment-853259723
Init /\ [][Next]_vars /\ WF_vars(Next) (* F *)
\* Wow, liveness (fairness) is subtle. However, this is not because TLA poorly
\* equipped to handle liveness. "[Instead,] the problem lies in the nature
\* of liveness, not in its definition" (Lamport).
\* "Narrowing" fairness from Next to DetectTermination makes sure that
\* a DetectTermination eventually happens instead of repeated token rounds.
\* TODO Convince yourself that AsyncTerminationDetection is still correct
\* TODO and EWD998 passes, i.e., rerun TLC.
Init /\ [][Next]_vars /\ WF_vars(DetectTermination) (* F *)

Terminates ==
\* * The behavior spec Spec asserts that every step/transition is a Next step, or
Expand Down

0 comments on commit 310ae85

Please sign in to comment.