Execution Chart

We display below the execution chart for this examination (boot time has been removed).

Trace from the execution

Waiting for the VM to be ready (probing ssh)
..............
=====================================================================
Generated by BenchKit 2-2979
Executing tool itstools
Input is S_QuasiCertifProtocol-COL-02, examination is CTLFireability
Time confinement is 3600 seconds
Memory confinement is 16384 MBytes
Number of cores is 4
Run identifier is r181kn-smll-146444110200013
=====================================================================

--------------------
content from stdout:

=== Data for post analysis generated by BenchKit (invocation template)

The expected result is a vector of booleans
BOOL_VECTOR

here is the order used to build the result vector(from text file)
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-0
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-1
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-10
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-11
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-12
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-13
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-14
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-15
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-2
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-3
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-4
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-5
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-6
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-7
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-8
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-9

=== Now, execution of the tool begins

BK_START 1464443583967


its-ctl command run as :

/home/mcc/BenchKit/eclipse/plugins/fr.lip6.move.gal.itstools.binaries_1.0.0.201605191313/bin/its-ctl-linux64 --gc-threshold 2000000 --quiet -i /home/mcc/execution/CTLFireability.gal -t CGAL -ctl /home/mcc/execution/CTLFireability.ctl
No direction supplied, using forward translation only.
Parsed 16 CTL formulae.
Model ,|S| ,Time ,Mem(kb) ,fin. SDD ,fin. DDD ,peak SDD ,peak DDD ,SDD Hom ,SDD cache peak ,DDD Hom ,DDD cachepeak ,SHom cache
reachable,1029,0.055473,5772,793,200,3586,677,199,1681,87,2234,0


Converting to forward existential form...Done !
original formula: AX(EG(!(((((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1) * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1))))))
=> equivalent forward existential formula: [(EY(Init) * !(EG(!(((((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1) * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))))))] = FALSE
Checking (exact) 0 :[(EY(Init) * !(EG(!(((((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1) * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))))))] = FALSE
Checking (exact) 0 :(EY(Init) * !(EG(!(((((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1) * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))))))
Checking (exact) 1 :!(EG(!(((((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1) * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1))))))
Checking (exact) 1 :EG(!(((((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1) * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))))
Fast SCC detection found none.
(forward)formula 0,1,0.287901,13440,1,0,18913,3547,1042,17092,450,18758,55717
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-0 TRUE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is TRUE !

***************************************

original formula: ((EF((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1))) * !(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + AF((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))) * E(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) * a2.a2[0]>=1)) U AF(a4.a4[0]>=1)))
=> equivalent forward existential formula: [(FwdU((Init * (E(TRUE U (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1))) * !(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))),((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) * a2.a2[0]>=1))) * !(EG(!(a4.a4[0]>=1))))] != FALSE
Checking (exact) 0 :[(FwdU((Init * (E(TRUE U (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1))) * !(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))),((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) * a2.a2[0]>=1))) * !(EG(!(a4.a4[0]>=1))))] != FALSE
Checking (exact) 0 :(FwdU((Init * (E(TRUE U (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1))) * !(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))),((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) * a2.a2[0]>=1))) * !(EG(!(a4.a4[0]>=1))))
Checking (exact) 1 :!(EG(!(a4.a4[0]>=1)))
Checking (exact) 1 :EG(!(a4.a4[0]>=1))
Checking (exact) 1 :FwdU((Init * (E(TRUE U (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1))) * !(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))),((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) * a2.a2[0]>=1)))
Checking (exact) 1 :(Init * (E(TRUE U (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1))) * !(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))))))
Checking (exact) 1 :(E(TRUE U (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1))) * !(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))
Checking (exact) 1 :!(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))))
Checking (exact) 1 :((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))
Checking (exact) 1 :!(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))
Checking (exact) 1 :EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))
Checking (exact) 1 :E(TRUE U (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)))
Checking (exact) 1 :Init
(forward)formula 1,0,0.341288,15504,1,0,22918,3821,1158,21636,451,21032,66210
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-1 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: (EF((AG((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) * (((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))) + (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))
=> equivalent forward existential formula: ([((FwdU(Init,TRUE) * (((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))))] != FALSE + [(Init * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))] != FALSE)
Checking (exact) 0 :([((FwdU(Init,TRUE) * (((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))))] != FALSE + [(Init * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))] != FALSE)
Checking (exact) 0 :[((FwdU(Init,TRUE) * (((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))))] != FALSE
Checking (exact) 0 :((FwdU(Init,TRUE) * (((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))))
Checking (exact) 1 :!(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))
Checking (exact) 1 :E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))
Checking (exact) 0 :[(Init * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))] != FALSE
Checking (exact) 0 :(Init * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))
(forward)formula 2,0,0.350869,15576,1,0,23058,3821,1199,21816,451,21032,67931
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-2 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: EG(!(((((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + a2.a2[0]>=1) * a2.a2[0]>=1) * (((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)) * (((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1)) * (((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1) * (((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1))))))
=> equivalent forward existential formula: [FwdG(Init,!(((((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + a2.a2[0]>=1) * a2.a2[0]>=1) * (((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)) * (((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1)) * (((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1) * (((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1))))))] != FALSE
Checking (exact) 0 :[FwdG(Init,!(((((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + a2.a2[0]>=1) * a2.a2[0]>=1) * (((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)) * (((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1)) * (((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1) * (((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1))))))] != FALSE
Checking (exact) 0 :FwdG(Init,!(((((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + a2.a2[0]>=1) * a2.a2[0]>=1) * (((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)) * (((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1)) * (((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1) * (((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1))))))
Checking (exact) 1 :Init
(forward)formula 3,1,0.374667,15996,1,0,23120,3821,1344,22115,465,21090,71617
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-3 TRUE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is TRUE !

***************************************

original formula: AF(AG(((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + ((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + (((tsid0.n4_0>=1 * tsid2.n4_2>=1) * tsid1.n4_1>=1) * a3.a3[0]>=1)))))
=> equivalent forward existential formula: [FwdG(Init,!(!(E(TRUE U !(((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + ((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + (((tsid0.n4_0>=1 * tsid2.n4_2>=1) * tsid1.n4_1>=1) * a3.a3[0]>=1))))))))] = FALSE
Checking (exact) 0 :[FwdG(Init,!(!(E(TRUE U !(((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + ((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + (((tsid0.n4_0>=1 * tsid2.n4_2>=1) * tsid1.n4_1>=1) * a3.a3[0]>=1))))))))] = FALSE
Checking (exact) 0 :FwdG(Init,!(!(E(TRUE U !(((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + ((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + (((tsid0.n4_0>=1 * tsid2.n4_2>=1) * tsid1.n4_1>=1) * a3.a3[0]>=1))))))))
Checking (exact) 1 :Init
Checking (exact) 1 :!(!(E(TRUE U !(((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + ((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + (((tsid0.n4_0>=1 * tsid2.n4_2>=1) * tsid1.n4_1>=1) * a3.a3[0]>=1)))))))
Checking (exact) 1 :E(TRUE U !(((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + ((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + (((tsid0.n4_0>=1 * tsid2.n4_2>=1) * tsid1.n4_1>=1) * a3.a3[0]>=1)))))
(forward)formula 4,0,0.386044,16256,1,0,23291,3869,1373,22318,465,21113,72587
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-4 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: (A(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1)))) U (((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) + AF((EG((((tsid0.s4_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s4_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s4_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * AX((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))))
=> equivalent forward existential formula: [FwdG((Init * !(!((E(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) U (!(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))))) * !((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))) + EG(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)))))))),!((EG((((tsid0.s4_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s4_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s4_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(EX(!((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))))))] = FALSE
Checking (exact) 0 :[FwdG((Init * !(!((E(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) U (!(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))))) * !((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))) + EG(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)))))))),!((EG((((tsid0.s4_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s4_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s4_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(EX(!((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))))))] = FALSE
Checking (exact) 0 :FwdG((Init * !(!((E(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) U (!(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))))) * !((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))) + EG(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)))))))),!((EG((((tsid0.s4_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s4_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s4_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(EX(!((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))))))
Checking (exact) 1 :(Init * !(!((E(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) U (!(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))))) * !((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))) + EG(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))))))
Checking (exact) 1 :!(!((E(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) U (!(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))))) * !((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))) + EG(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)))))))
Checking (exact) 1 :(E(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) U (!(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))))) * !((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))) + EG(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)))))
Checking (exact) 1 :E(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) U (!(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))))) * !((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)))))
Checking (exact) 1 :EG(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))
Checking (exact) 1 :Init
Checking (exact) 1 :!((EG((((tsid0.s4_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s4_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s4_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(EX(!((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))))))
Checking (exact) 1 :(EG((((tsid0.s4_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s4_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s4_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(EX(!((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))))
Checking (exact) 1 :!(EX(!((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))))
Checking (exact) 1 :EX(!((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))
Checking (exact) 1 :EG((((tsid0.s4_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s4_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s4_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))
(forward)formula 5,0,0.462865,18144,1,0,28058,3869,1426,27042,466,21384,83379
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-5 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: AF(AG(AF(a1.a1[0]>=1)))
=> equivalent forward existential formula: [FwdG(Init,!(!(E(TRUE U !(!(EG(!(a1.a1[0]>=1))))))))] = FALSE
Checking (exact) 0 :[FwdG(Init,!(!(E(TRUE U !(!(EG(!(a1.a1[0]>=1))))))))] = FALSE
Checking (exact) 0 :FwdG(Init,!(!(E(TRUE U !(!(EG(!(a1.a1[0]>=1))))))))
Checking (exact) 1 :Init
Checking (exact) 1 :!(!(E(TRUE U !(!(EG(!(a1.a1[0]>=1)))))))
Checking (exact) 1 :E(TRUE U !(!(EG(!(a1.a1[0]>=1)))))
Checking (exact) 1 :!(!(EG(!(a1.a1[0]>=1))))
Checking (exact) 1 :EG(!(a1.a1[0]>=1))
(forward)formula 6,0,0.466857,18188,1,0,28180,3928,1447,27251,466,21549,84116
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-6 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: ((!((AF(a5.a5[0]>=1) + EX(a3.a3[0]>=1))) + A((a1.a1[0]>=1 + ((tsid0.s6_0>=1 + tsid1.s6_1>=1) + tsid2.s6_2>=1)) U ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))) + A(AG(a2.a2[0]>=1) U ((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1)))
=> equivalent forward existential formula: (([FwdG((Init * !(EX(a3.a3[0]>=1))),!(a5.a5[0]>=1))] != FALSE + [((Init * !(EG(!(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))) * !(E(!(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))) U (!((a1.a1[0]>=1 + ((tsid0.s6_0>=1 + tsid1.s6_1>=1) + tsid2.s6_2>=1))) * !(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))] != FALSE) + [((Init * !(EG(!(((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1))))) * !(E(!(((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1)) U (!(!(E(TRUE U !(a2.a2[0]>=1)))) * !(((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1))))))] != FALSE)
Checking (exact) 0 :(([FwdG((Init * !(EX(a3.a3[0]>=1))),!(a5.a5[0]>=1))] != FALSE + [((Init * !(EG(!(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))) * !(E(!(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))) U (!((a1.a1[0]>=1 + ((tsid0.s6_0>=1 + tsid1.s6_1>=1) + tsid2.s6_2>=1))) * !(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))] != FALSE) + [((Init * !(EG(!(((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1))))) * !(E(!(((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1)) U (!(!(E(TRUE U !(a2.a2[0]>=1)))) * !(((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1))))))] != FALSE)
Checking (exact) 0 :([FwdG((Init * !(EX(a3.a3[0]>=1))),!(a5.a5[0]>=1))] != FALSE + [((Init * !(EG(!(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))) * !(E(!(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))) U (!((a1.a1[0]>=1 + ((tsid0.s6_0>=1 + tsid1.s6_1>=1) + tsid2.s6_2>=1))) * !(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))] != FALSE)
Checking (exact) 0 :[FwdG((Init * !(EX(a3.a3[0]>=1))),!(a5.a5[0]>=1))] != FALSE
Checking (exact) 0 :FwdG((Init * !(EX(a3.a3[0]>=1))),!(a5.a5[0]>=1))
Checking (exact) 1 :(Init * !(EX(a3.a3[0]>=1)))
Checking (exact) 1 :!(EX(a3.a3[0]>=1))
Checking (exact) 1 :EX(a3.a3[0]>=1)
Checking (exact) 1 :Init
(forward)formula 7,1,0.468859,18232,1,0,28310,3928,1470,27375,466,21549,84525
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-7 TRUE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is TRUE !

***************************************

original formula: A((EG(a5.a5[0]>=1) * EF(a5.a5[0]>=1)) U AF((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))
=> equivalent forward existential formula: [((Init * !(EG(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))) * !(E(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))) U (!((EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1))) * !(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))))] != FALSE
Checking (exact) 0 :[((Init * !(EG(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))) * !(E(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))) U (!((EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1))) * !(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))))] != FALSE
Checking (exact) 0 :((Init * !(EG(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))) * !(E(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))) U (!((EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1))) * !(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))))
Checking (exact) 1 :!(E(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))) U (!((EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1))) * !(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))))))
Checking (exact) 1 :E(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))) U (!((EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1))) * !(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))
Checking (exact) 1 :!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))
Checking (exact) 1 :EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))
Checking (exact) 1 :(!((EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1))) * !(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))))
Checking (exact) 1 :!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))
Checking (exact) 1 :EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))
Checking (exact) 1 :!((EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1)))
Checking (exact) 1 :(EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1))
Checking (exact) 1 :E(TRUE U a5.a5[0]>=1)
Checking (exact) 1 :EG(a5.a5[0]>=1)
Checking (exact) 1 :(Init * !(EG(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))))))
Checking (exact) 1 :!(EG(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))
Checking (exact) 1 :EG(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))))
Checking (exact) 1 :!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))
Checking (exact) 1 :EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))
Checking (exact) 1 :Init
(forward)formula 8,0,0.496735,19340,1,0,30714,3961,1486,30742,466,21666,88151
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-8 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: EF(AF(AG((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))
=> equivalent forward existential formula: [(FwdU(Init,TRUE) * !(EG(!(!(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))))))] != FALSE
Checking (exact) 0 :[(FwdU(Init,TRUE) * !(EG(!(!(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))))))] != FALSE
Checking (exact) 0 :(FwdU(Init,TRUE) * !(EG(!(!(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))))))
Checking (exact) 1 :!(EG(!(!(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))))))
Checking (exact) 1 :EG(!(!(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))))
Checking (exact) 1 :!(!(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))))
Checking (exact) 1 :E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))
(forward)formula 9,0,0.500494,19340,1,0,30714,3961,1486,30742,466,21666,88151
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-9 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: AF((A((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1)) U (((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) * (((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))
=> equivalent forward existential formula: [FwdG(Init,!((!((E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))) + EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))) * (((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))))] = FALSE
Checking (exact) 0 :[FwdG(Init,!((!((E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))) + EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))) * (((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))))] = FALSE
Checking (exact) 0 :FwdG(Init,!((!((E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))) + EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))) * (((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))))
Checking (exact) 1 :Init
Checking (exact) 1 :!((!((E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))) + EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))) * (((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))
Checking (exact) 1 :(!((E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))) + EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))) * (((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))
Checking (exact) 1 :(((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))
Checking (exact) 1 :!((E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))) + EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))))
Checking (exact) 1 :(E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))) + EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))
Checking (exact) 1 :E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))
Checking (exact) 1 :EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))
(forward)formula 10,0,0.540219,20084,1,0,32491,4033,1531,32786,466,21826,94595
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-10 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: ((EF(!(((((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1) + (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))) * !(((!(Astart.Astart[0]>=1) + (((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1)) * (!((((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))) + ((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1)) * a2.a2[0]>=1))))) * AX(EF(((((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + a2.a2[0]>=1))))
=> equivalent forward existential formula: (([(Init * !(E(TRUE U !(((((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1) + (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))))] = FALSE * [(Init * ((!(Astart.Astart[0]>=1) + (((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1)) * (!((((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))) + ((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1)) * a2.a2[0]>=1))))] = FALSE) * [(EY(Init) * !(E(TRUE U ((((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + a2.a2[0]>=1))))] = FALSE)
Checking (exact) 0 :(([(Init * !(E(TRUE U !(((((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1) + (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))))] = FALSE * [(Init * ((!(Astart.Astart[0]>=1) + (((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1)) * (!((((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))) + ((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1)) * a2.a2[0]>=1))))] = FALSE) * [(EY(Init) * !(E(TRUE U ((((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + a2.a2[0]>=1))))] = FALSE)
Checking (exact) 1 :[(EY(Init) * !(E(TRUE U ((((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + a2.a2[0]>=1))))] = FALSE
Checking (exact) 0 :(EY(Init) * !(E(TRUE U ((((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + a2.a2[0]>=1))))
Checking (exact) 1 :!(E(TRUE U ((((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + a2.a2[0]>=1)))
Checking (exact) 1 :E(TRUE U ((((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + a2.a2[0]>=1))
Checking (exact) 1 :EY(Init)
Checking (exact) 1 :Init
(forward)formula 11,0,0.54421,20344,1,0,32605,4047,1544,32906,466,21889,95092
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-11 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: EX(E(!(a2.a2[0]>=1) U ((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)) * (((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))))
=> equivalent forward existential formula: [(FwdU(EY(Init),!(a2.a2[0]>=1)) * ((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)) * (((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))] != FALSE
Checking (exact) 0 :[(FwdU(EY(Init),!(a2.a2[0]>=1)) * ((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)) * (((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))] != FALSE
Checking (exact) 0 :(FwdU(EY(Init),!(a2.a2[0]>=1)) * ((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)) * (((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))
(forward)formula 12,0,0.545806,20348,1,0,32626,4047,1546,32906,466,21889,95093
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-12 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: EG(EX(EF((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))
=> equivalent forward existential formula: [FwdG(Init,EX(E(TRUE U (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))] != FALSE
Checking (exact) 0 :[FwdG(Init,EX(E(TRUE U (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))] != FALSE
Checking (exact) 0 :FwdG(Init,EX(E(TRUE U (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))
Checking (exact) 1 :Init
Checking (exact) 1 :EX(E(TRUE U (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))
Checking (exact) 1 :E(TRUE U (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))
dead was empty
(forward)formula 13,0,0.56067,20408,1,0,33396,4048,1546,33813,466,21906,97598
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-13 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: AG(AF((a2.a2[0]>=1 * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1))))))
=> equivalent forward existential formula: [FwdG(FwdU(Init,TRUE),!((a2.a2[0]>=1 * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1))))))] = FALSE
Checking (exact) 0 :[FwdG(FwdU(Init,TRUE),!((a2.a2[0]>=1 * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1))))))] = FALSE
Checking (exact) 0 :FwdG(FwdU(Init,TRUE),!((a2.a2[0]>=1 * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1))))))
Checking (exact) 1 :FwdU(Init,TRUE)
Checking (exact) 1 :Init
(forward)formula 14,0,0.563489,20808,1,0,33433,4048,1550,33828,466,21906,97931
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-14 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: EG(!(a2.a2[0]>=1))
=> equivalent forward existential formula: [FwdG(Init,!(a2.a2[0]>=1))] != FALSE
Checking (exact) 0 :[FwdG(Init,!(a2.a2[0]>=1))] != FALSE
Checking (exact) 0 :FwdG(Init,!(a2.a2[0]>=1))
Checking (exact) 1 :Init
(forward)formula 15,1,0.565248,20808,1,0,33500,4048,1580,33896,466,21906,98332
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-15 TRUE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is TRUE !

***************************************


BK_STOP 1464443589790

--------------------
content from stderr:

+ export BINDIR=/home/mcc/BenchKit/
+ BINDIR=/home/mcc/BenchKit/
++ pwd
+ export MODEL=/home/mcc/execution
+ MODEL=/home/mcc/execution
+ [[ CTLFireability = StateSpace ]]
+ /home/mcc/BenchKit//runeclipse.sh /home/mcc/execution CTLFireability -its
+ ulimit -s 65536
+ java -Dosgi.requiredJavaVersion=1.6 -XX:MaxPermSize=512m -Xss8m -Xms40m -Xmx8192m -Declipse.pde.launch=true -Dfile.encoding=UTF-8 -classpath /home/mcc/BenchKit//eclipse/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar org.eclipse.equinox.launcher.Main -application fr.lip6.move.gal.application.pnmcc -data /home/mcc/BenchKit//workspace -os linux -ws gtk -arch x86_64 -nl en_US -consoleLog -pnfolder /home/mcc/execution -examination CTLFireability -z3path /home/mcc/BenchKit//z3/bin/z3 -yices2path /home/mcc/BenchKit//yices/bin/yices -its
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512m; support was removed in 8.0
May 28, 2016 1:53:06 PM fr.lip6.move.gal.application.Application transformPNML
INFO: Parsing pnml file : /home/mcc/execution/model.pnml
May 28, 2016 1:53:06 PM fr.lip6.move.gal.pnml.togal.PnmlToGalTransformer transform
INFO: Detected file is not PT type :http://www.pnml.org/version-2009/grammar/symmetricnet
May 28, 2016 1:53:08 PM fr.lip6.move.gal.pnml.togal.PnmlToGalTransformer transform
INFO: Load time of PNML (colored model parsed with PNMLFW) : 1176 ms
May 28, 2016 1:53:08 PM fr.lip6.move.gal.pnml.togal.HLGALTransformer handlePage
INFO: Transformed 30 places.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.pnml.togal.HLGALTransformer handlePage
INFO: read order :VarOrder [vars=[malicious_reservoir[0], CstopAbort[0], SstopAbort[0], AstopAbort[0], n9[0], n9[1], n9[2], n9[3], n9[4], n9[5], n9[6], n9[7], n9[8], n8[0], n8[1], n8[2], n8[3], n8[4], n8[5], n8[6], n8[7], n8[8], n7[0], n7[1], n7[2], n7[3], n7[4], n7[5], n7[6], n7[7], n7[8], n6[0], n6[1], n6[2], n5[0], n5[1], n5[2], n4[0], n4[1], n4[2], n3[0], n3[1], n3[2], n2[0], n2[1], n2[2], n1[0], n1[1], n1[2], c1[0], c1[1], c1[2], Cstart[0], Cstart[1], Cstart[2], Sstart[0], Sstart[1], Sstart[2], s2[0], s2[1], s2[2], s3[0], s3[1], s3[2], s4[0], s4[1], s4[2], s5[0], s5[1], s5[2], s6[0], s6[1], s6[2], SstopOK[0], SstopOK[1], SstopOK[2], a5[0], a4[0], a3[0], a2[0], a1[0], Astart[0], AstopOK[0], CstopOK[0], CstopOK[1], CstopOK[2]]]
May 28, 2016 1:53:08 PM fr.lip6.move.gal.pnml.togal.HLGALTransformer handlePage
INFO: sort/places :tsidxtsid->n9,n8,n7,
Dot->malicious_reservoir,CstopAbort,SstopAbort,AstopAbort,a5,a4,a3,a2,a1,Astart,AstopOK,
tsid->n6,n5,n4,n3,n2,n1,c1,Cstart,Sstart,s2,s3,s4,s5,s6,SstopOK,CstopOK,

May 28, 2016 1:53:08 PM fr.lip6.move.gal.pnml.togal.HLGALTransformer handlePage
INFO: Transformed 26 transitions.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.pnml.togal.PnmlToGalTransformer transform
INFO: Computed order based on color domains : CompositeGalOrder [children=[VarOrder [vars=[n9[0], n8[0], n7[0]]], VarOrder [vars=[n9[1], n8[1], n7[1]]], VarOrder [vars=[n9[2], n8[2], n7[2]]], VarOrder [vars=[n9[3], n8[3], n7[3]]], VarOrder [vars=[n9[4], n8[4], n7[4]]], VarOrder [vars=[n9[5], n8[5], n7[5]]], VarOrder [vars=[n9[6], n8[6], n7[6]]], VarOrder [vars=[n9[7], n8[7], n7[7]]], VarOrder [vars=[n9[8], n8[8], n7[8]]], VarOrder [vars=[malicious_reservoir[0]]], VarOrder [vars=[CstopAbort[0]]], VarOrder [vars=[SstopAbort[0]]], VarOrder [vars=[AstopAbort[0]]], VarOrder [vars=[a5[0]]], VarOrder [vars=[a4[0]]], VarOrder [vars=[a3[0]]], VarOrder [vars=[a2[0]]], VarOrder [vars=[a1[0]]], VarOrder [vars=[Astart[0]]], VarOrder [vars=[AstopOK[0]]], VarOrder [vars=[n6[0], n5[0], n4[0], n3[0], n2[0], n1[0], c1[0], Cstart[0], Sstart[0], s2[0], s3[0], s4[0], s5[0], s6[0], SstopOK[0], CstopOK[0]]], VarOrder [vars=[n6[1], n5[1], n4[1], n3[1], n2[1], n1[1], c1[1], Cstart[1], Sstart[1], s2[1], s3[1], s4[1], s5[1], s6[1], SstopOK[1], CstopOK[1]]], VarOrder [vars=[n6[2], n5[2], n4[2], n3[2], n2[2], n1[2], c1[2], Cstart[2], Sstart[2], s2[2], s3[2], s4[2], s5[2], s6[2], SstopOK[2], CstopOK[2]]]]]
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.GALRewriter flatten
INFO: Flatten gal took : 50 ms
May 28, 2016 1:53:08 PM fr.lip6.move.gal.application.Application applyOrder
INFO: Applying decomposition
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder decomposeWithOrder
INFO: Decomposing Gal with order
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.GALRewriter flatten
INFO: Flatten gal took : 25 ms
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder decomposeWithOrder
INFO: Partition obtained :[n9[0], n8[0], n7[0], ],[n9[1], n8[1], n7[1], ],[n9[2], n8[2], n7[2], ],[n9[3], n8[3], n7[3], ],[n9[4], n8[4], n7[4], ],[n9[5], n8[5], n7[5], ],[n9[6], n8[6], n7[6], ],[n9[7], n8[7], n7[7], ],[n9[8], n8[8], n7[8], ],[malicious_reservoir[0], ],[CstopAbort[0], ],[SstopAbort[0], ],[AstopAbort[0], ],[a5[0], ],[a4[0], ],[a3[0], ],[a2[0], ],[a1[0], ],[Astart[0], ],[AstopOK[0], ],[n6[0], n5[0], n4[0], n3[0], n2[0], n1[0], c1[0], Cstart[0], Sstart[0], s2[0], s3[0], s4[0], s5[0], s6[0], SstopOK[0], CstopOK[0], ],[n6[1], n5[1], n4[1], n3[1], n2[1], n1[1], c1[1], Cstart[1], Sstart[1], s2[1], s3[1], s4[1], s5[1], s6[1], SstopOK[1], CstopOK[1], ],[n6[2], n5[2], n4[2], n3[2], n2[2], n1[2], c1[2], Cstart[2], Sstart[2], s2[2], s3[2], s4[2], s5[2], s6[2], SstopOK[2], CstopOK[2], ],

May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n9 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n8 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n7 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n6 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n5 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n4 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n3 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n2 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n1 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array c1 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array Cstart to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array Sstart to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array s2 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array s3 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array s4 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array s5 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array s6 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array SstopOK to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array CstopOK to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.Instantiator fuseIsomorphicEffects
INFO: Removed a total of 20 redundant transitions.
May 28, 2016 1:53:08 PM fr.lip6.move.serialization.SerializationUtil systemToFile
INFO: Time to serialize gal into /home/mcc/execution/CTLFireability.gal : 16 ms
May 28, 2016 1:53:08 PM fr.lip6.move.serialization.SerializationUtil serializePropertiesForITSCTLTools
INFO: Time to serialize properties into /home/mcc/execution/CTLFireability.ctl : 4 ms

Sequence of Actions to be Executed by the VM

This is useful if one wants to reexecute the tool in the VM from the submitted image disk.

set -x
# this is for BenchKit: configuration of major elements for the test
export BK_INPUT="S_QuasiCertifProtocol-COL-02"
export BK_EXAMINATION="CTLFireability"
export BK_TOOL="itstools"
export BK_RESULT_DIR="/root/BK_RESULTS/OUTPUTS"
export BK_TIME_CONFINEMENT="3600"
export BK_MEMORY_CONFINEMENT="16384"

# this is specific to your benchmark or test

export BIN_DIR="$HOME/BenchKit/bin"

# remove the execution directoty if it exists (to avoid increse of .vmdk images)
if [ -d execution ] ; then
rm -rf execution
fi

tar xzf /home/mcc/BenchKit/INPUTS/S_QuasiCertifProtocol-COL-02.tgz
mv S_QuasiCertifProtocol-COL-02 execution

# this is for BenchKit: explicit launching of the test

cd execution
echo "====================================================================="
echo " Generated by BenchKit 2-2979"
echo " Executing tool itstools"
echo " Input is S_QuasiCertifProtocol-COL-02, examination is CTLFireability"
echo " Time confinement is $BK_TIME_CONFINEMENT seconds"
echo " Memory confinement is 16384 MBytes"
echo " Number of cores is 4"
echo " Run identifier is r181kn-smll-146444110200013"
echo "====================================================================="
echo
echo "--------------------"
echo "content from stdout:"
echo
echo "=== Data for post analysis generated by BenchKit (invocation template)"
echo
if [ "CTLFireability" = "UpperBounds" ] ; then
echo "The expected result is a vector of positive values"
echo NUM_VECTOR
elif [ "CTLFireability" != "StateSpace" ] ; then
echo "The expected result is a vector of booleans"
echo BOOL_VECTOR
else
echo "no data necessary for post analysis"
fi
echo
if [ -f "CTLFireability.txt" ] ; then
echo "here is the order used to build the result vector(from text file)"
for x in $(grep Property CTLFireability.txt | cut -d ' ' -f 2 | sort -u) ; do
echo "FORMULA_NAME $x"
done
elif [ -f "CTLFireability.xml" ] ; then # for cunf (txt files deleted;-)
echo echo "here is the order used to build the result vector(from xml file)"
for x in $(grep '' CTLFireability.xml | cut -d '>' -f 2 | cut -d '<' -f 1 | sort -u) ; do
echo "FORMULA_NAME $x"
done
fi
echo
echo "=== Now, execution of the tool begins"
echo
echo -n "BK_START "
date -u +%s%3N
echo
timeout -s 9 $BK_TIME_CONFINEMENT bash -c "/home/mcc/BenchKit/BenchKit_head.sh 2> STDERR ; echo ; echo -n \"BK_STOP \" ; date -u +%s%3N"
if [ $? -eq 137 ] ; then
echo
echo "BK_TIME_CONFINEMENT_REACHED"
fi
echo
echo "--------------------"
echo "content from stderr:"
echo
cat STDERR ;