Execution Chart

We display below the execution chart for this examination (boot time has been removed).

Trace from the execution

Waiting for the VM to be ready (probing ssh)
.....................................................................................
=====================================================================
Generated by BenchKit 2-2979
Executing tool tapaalSEQ
Input is S_QuasiCertifProtocol-PT-10, examination is ReachabilityCardinality
Time confinement is 3600 seconds
Memory confinement is 16384 MBytes
Number of cores is 1
Run identifier is r186kn-smll-146444131800097
=====================================================================

--------------------
content from stdout:

=== Data for post analysis generated by BenchKit (invocation template)

The expected result is a vector of booleans
BOOL_VECTOR

here is the order used to build the result vector(from text file)
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-0
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-1
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-10
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-11
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-12
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-13
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-14
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-15
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-2
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-3
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-4
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-5
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-6
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-7
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-8
FORMULA_NAME QuasiCertifProtocol-COL-10-ReachabilityCardinality-9

=== Now, execution of the tool begins

BK_START 1464540542716

---> tapaalSEQ --- TAPAAL Sequential

*******************************************************
* TAPAAL Sequential verifying ReachabilityCardinality *
*******************************************************

timeout 5 verifypn -n -s OverApprox -x 1 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-0: not EF not ( ((((("s4_0" + "s4_3" + "s4_4" + "s4_1" + "s4_2" + "s4_7" + "s4_8" + "s4_5" + "s4_6" + "s4_10" + "s4_9") <= ("Cstart_1" + "Cstart_0" + "Cstart_9" + "Cstart_8" + "Cstart_7" + "Cstart_6" + "Cstart_5" + "Cstart_4" + "Cstart_3" + "Cstart_2" + "Cstart_10")) or (("s6_1" + "s6_0" + "s6_3" + "s6_2" + "s6_5" + "s6_4" + "s6_7" + "s6_6" + "s6_9" + "s6_8" + "s6_10") <= ("s6_1" + "s6_0" + "s6_3" + "s6_2" + "s6_5" + "s6_4" + "s6_7" + "s6_6" + "s6_9" + "s6_8" + "s6_10"))) or not((("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10") <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")))) or (((2 <= ("s2_2" + "s2_1" + "s2_0" + "s2_7" + "s2_8" + "s2_9" + "s2_10" + "s2_3" + "s2_4" + "s2_5" + "s2_6")) and (2 <= ("n6_4" + "n6_3" + "n6_6" + "n6_5" + "n6_0" + "n6_2" + "n6_1" + "n6_8" + "n6_7" + "n6_10" + "n6_9"))) or ((("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10") <= ("n8_9_1" + "n8_8_1" + "n8_0_2" + "n8_10_1" + "n8_5_1" + "n8_4_1" + "n8_7_1" + "n8_6_1" + "n8_6_2" + "n8_5_2" + "n8_8_2" + "n8_7_2" + "n8_2_2" + "n8_1_2" + "n8_4_2" + "n8_3_2" + "n8_3_0" + "n8_4_0" + "n8_5_0" + "n8_6_0" + "n8_0_0" + "n8_1_0" + "n8_2_0" + "n8_0_1" + "n8_1_1" + "n8_2_1" + "n8_3_1" + "n8_7_0" + "n8_8_0" + "n8_9_0" + "n8_10_0" + "n8_2_5" + "n8_3_5" + "n8_0_5" + "n8_1_5" + "n8_6_5" + "n8_7_5" + "n8_4_5" + "n8_5_5" + "n8_5_4" + "n8_6_4" + "n8_3_4" + "n8_4_4" + "n8_9_4" + "n8_10_4" + "n8_7_4" + "n8_8_4" + "n8_9_3" + "n8_8_3" + "n8_7_3" + "n8_6_3" + "n8_2_4" + "n8_1_4" + "n8_0_4" + "n8_10_3" + "n8_1_3" + "n8_0_3" + "n8_10_2" + "n8_9_2" + "n8_5_3" + "n8_4_3" + "n8_3_3" + "n8_2_3" + "n8_10_7" + "n8_0_8" + "n8_1_8" + "n8_2_8" + "n8_3_8" + "n8_4_8" + "n8_5_8" + "n8_6_8" + "n8_2_7" + "n8_3_7" + "n8_4_7" + "n8_5_7" + "n8_6_7" + "n8_7_7" + "n8_8_7" + "n8_9_7" + "n8_6_6" + "n8_5_6" + "n8_8_6" + "n8_7_6" + "n8_10_6" + "n8_9_6" + "n8_1_7" + "n8_0_7" + "n8_9_5" + "n8_8_5" + "n8_0_6" + "n8_10_5" + "n8_2_6" + "n8_1_6" + "n8_4_6" + "n8_3_6" + "n8_9_10" + "n8_10_10" + "n8_7_10" + "n8_8_10" + "n8_5_10" + "n8_6_10" + "n8_3_10" + "n8_4_10" + "n8_1_10" + "n8_2_10" + "n8_0_10" + "n8_10_9" + "n8_9_9" + "n8_8_9" + "n8_7_9" + "n8_6_9" + "n8_5_9" + "n8_4_9" + "n8_3_9" + "n8_2_9" + "n8_1_9" + "n8_0_9" + "n8_10_8" + "n8_9_8" + "n8_8_8" + "n8_7_8")) and (3 <= ("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10"))))) )


Unable to decide if query is satisfied.


timeout 5 verifypn -n -s OverApprox -x 2 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-1: not EF not ( (((("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8") <= ("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8")) and not((3 <= ("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10")))) or (((2 <= "AstopOK") and (2 <= ("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8"))) and ((1 <= ("s5_1" + "s5_0" + "s5_3" + "s5_2" + "s5_6" + "s5_7" + "s5_4" + "s5_5" + "s5_10" + "s5_8" + "s5_9")) and (("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10") <= ("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10"))))) )


Unable to decide if query is satisfied.


timeout 5 verifypn -n -s OverApprox -x 3 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-2: EF ( (not(((("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10") <= ("s5_1" + "s5_0" + "s5_3" + "s5_2" + "s5_6" + "s5_7" + "s5_4" + "s5_5" + "s5_10" + "s5_8" + "s5_9")) or (3 <= "SstopAbort"))) and (("a1" <= "a4") or (("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10") <= ("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10")))) )


Unable to decide if query is satisfied.


timeout 5 verifypn -n -s OverApprox -x 4 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-3: not EF not ( ((((("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10") <= "CstopAbort") or (("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10") <= "AstopAbort")) and ((1 <= "a5") or (("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8") <= ("n3_8" + "n3_9" + "n3_10" + "n3_4" + "n3_5" + "n3_6" + "n3_7" + "n3_0" + "n3_1" + "n3_2" + "n3_3")))) or (2 <= ("n3_8" + "n3_9" + "n3_10" + "n3_4" + "n3_5" + "n3_6" + "n3_7" + "n3_0" + "n3_1" + "n3_2" + "n3_3"))) )


Unable to decide if query is satisfied.


timeout 5 verifypn -n -s OverApprox -x 5 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-4: not EF not ( not((3 <= "a4")) )

FORMULA QuasiCertifProtocol-COL-10-ReachabilityCardinality-4 TRUE TECHNIQUES SEQUENTIAL_PROCESSING EXPLICIT STRUCTURAL_REDUCTION

Query is satisfied.


timeout 5 verifypn -n -s OverApprox -x 6 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-5: EF ( (2 <= ("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9")) )


Unable to decide if query is satisfied.


timeout 5 verifypn -n -s OverApprox -x 7 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-6: EF ( not(not((("CstopAbort" <= ("s2_2" + "s2_1" + "s2_0" + "s2_7" + "s2_8" + "s2_9" + "s2_10" + "s2_3" + "s2_4" + "s2_5" + "s2_6")) and (1 <= "a3")))) )


Unable to decide if query is satisfied.


timeout 5 verifypn -n -s OverApprox -x 8 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-7: not EF not ( (not(((2 <= ("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9")) or (1 <= "SstopAbort"))) or not(not(("a5" <= ("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10"))))) )


Unable to decide if query is satisfied.


timeout 5 verifypn -n -s OverApprox -x 9 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-8: EF ( ((((1 <= ("n1_4" + "n1_5" + "n1_2" + "n1_3" + "n1_0" + "n1_1" + "n1_10" + "n1_7" + "n1_6" + "n1_9" + "n1_8")) and (3 <= ("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10"))) and ((2 <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")) or (2 <= ("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10")))) and (((("CstopOK_10" + "CstopOK_6" + "CstopOK_7" + "CstopOK_8" + "CstopOK_9" + "CstopOK_2" + "CstopOK_3" + "CstopOK_4" + "CstopOK_5" + "CstopOK_0" + "CstopOK_1") <= ("s4_0" + "s4_3" + "s4_4" + "s4_1" + "s4_2" + "s4_7" + "s4_8" + "s4_5" + "s4_6" + "s4_10" + "s4_9")) or (3 <= ("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10"))) or ((("n8_9_1" + "n8_8_1" + "n8_0_2" + "n8_10_1" + "n8_5_1" + "n8_4_1" + "n8_7_1" + "n8_6_1" + "n8_6_2" + "n8_5_2" + "n8_8_2" + "n8_7_2" + "n8_2_2" + "n8_1_2" + "n8_4_2" + "n8_3_2" + "n8_3_0" + "n8_4_0" + "n8_5_0" + "n8_6_0" + "n8_0_0" + "n8_1_0" + "n8_2_0" + "n8_0_1" + "n8_1_1" + "n8_2_1" + "n8_3_1" + "n8_7_0" + "n8_8_0" + "n8_9_0" + "n8_10_0" + "n8_2_5" + "n8_3_5" + "n8_0_5" + "n8_1_5" + "n8_6_5" + "n8_7_5" + "n8_4_5" + "n8_5_5" + "n8_5_4" + "n8_6_4" + "n8_3_4" + "n8_4_4" + "n8_9_4" + "n8_10_4" + "n8_7_4" + "n8_8_4" + "n8_9_3" + "n8_8_3" + "n8_7_3" + "n8_6_3" + "n8_2_4" + "n8_1_4" + "n8_0_4" + "n8_10_3" + "n8_1_3" + "n8_0_3" + "n8_10_2" + "n8_9_2" + "n8_5_3" + "n8_4_3" + "n8_3_3" + "n8_2_3" + "n8_10_7" + "n8_0_8" + "n8_1_8" + "n8_2_8" + "n8_3_8" + "n8_4_8" + "n8_5_8" + "n8_6_8" + "n8_2_7" + "n8_3_7" + "n8_4_7" + "n8_5_7" + "n8_6_7" + "n8_7_7" + "n8_8_7" + "n8_9_7" + "n8_6_6" + "n8_5_6" + "n8_8_6" + "n8_7_6" + "n8_10_6" + "n8_9_6" + "n8_1_7" + "n8_0_7" + "n8_9_5" + "n8_8_5" + "n8_0_6" + "n8_10_5" + "n8_2_6" + "n8_1_6" + "n8_4_6" + "n8_3_6" + "n8_9_10" + "n8_10_10" + "n8_7_10" + "n8_8_10" + "n8_5_10" + "n8_6_10" + "n8_3_10" + "n8_4_10" + "n8_1_10" + "n8_2_10" + "n8_0_10" + "n8_10_9" + "n8_9_9" + "n8_8_9" + "n8_7_9" + "n8_6_9" + "n8_5_9" + "n8_4_9" + "n8_3_9" + "n8_2_9" + "n8_1_9" + "n8_0_9" + "n8_10_8" + "n8_9_8" + "n8_8_8" + "n8_7_8") <= ("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10")) or (("c1_0" + "c1_1" + "c1_2" + "c1_3" + "c1_4" + "c1_5" + "c1_6" + "c1_7" + "c1_8" + "c1_9" + "c1_10") <= ("s6_1" + "s6_0" + "s6_3" + "s6_2" + "s6_5" + "s6_4" + "s6_7" + "s6_6" + "s6_9" + "s6_8" + "s6_10"))))) )


Unable to decide if query is satisfied.


timeout 5 verifypn -n -s OverApprox -x 10 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-9: not EF not ( not((3 <= ("s2_2" + "s2_1" + "s2_0" + "s2_7" + "s2_8" + "s2_9" + "s2_10" + "s2_3" + "s2_4" + "s2_5" + "s2_6"))) )


Unable to decide if query is satisfied.


timeout 5 verifypn -n -s OverApprox -x 11 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-10: not EF not ( ((not(("malicious_reservoir" <= ("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8"))) or not((("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10") <= ("n1_4" + "n1_5" + "n1_2" + "n1_3" + "n1_0" + "n1_1" + "n1_10" + "n1_7" + "n1_6" + "n1_9" + "n1_8")))) or (not((1 <= ("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9"))) and ((1 <= "malicious_reservoir") or ("CstopAbort" <= ("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10"))))) )


Unable to decide if query is satisfied.


timeout 5 verifypn -n -s OverApprox -x 12 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-11: not EF not ( ((("s2_2" + "s2_1" + "s2_0" + "s2_7" + "s2_8" + "s2_9" + "s2_10" + "s2_3" + "s2_4" + "s2_5" + "s2_6") <= ("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10")) or not((("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10") <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")))) )


Unable to decide if query is satisfied.


timeout 5 verifypn -n -s OverApprox -x 13 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-12: not EF not ( not((((("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9") <= ("n6_4" + "n6_3" + "n6_6" + "n6_5" + "n6_0" + "n6_2" + "n6_1" + "n6_8" + "n6_7" + "n6_10" + "n6_9")) and (("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10") <= ("s2_2" + "s2_1" + "s2_0" + "s2_7" + "s2_8" + "s2_9" + "s2_10" + "s2_3" + "s2_4" + "s2_5" + "s2_6"))) or not((("s4_0" + "s4_3" + "s4_4" + "s4_1" + "s4_2" + "s4_7" + "s4_8" + "s4_5" + "s4_6" + "s4_10" + "s4_9") <= ("Cstart_1" + "Cstart_0" + "Cstart_9" + "Cstart_8" + "Cstart_7" + "Cstart_6" + "Cstart_5" + "Cstart_4" + "Cstart_3" + "Cstart_2" + "Cstart_10"))))) )


Unable to decide if query is satisfied.


timeout 5 verifypn -n -s OverApprox -x 14 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-13: not EF not ( ((((("s5_1" + "s5_0" + "s5_3" + "s5_2" + "s5_6" + "s5_7" + "s5_4" + "s5_5" + "s5_10" + "s5_8" + "s5_9") <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")) and (("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10") <= "malicious_reservoir")) or (("a2" <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")) or (2 <= "a5"))) or (("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8") <= "a4")) )


Unable to decide if query is satisfied.


timeout 5 verifypn -n -s OverApprox -x 15 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-14: EF ( ((not((("c1_0" + "c1_1" + "c1_2" + "c1_3" + "c1_4" + "c1_5" + "c1_6" + "c1_7" + "c1_8" + "c1_9" + "c1_10") <= "a5")) or ((("n3_8" + "n3_9" + "n3_10" + "n3_4" + "n3_5" + "n3_6" + "n3_7" + "n3_0" + "n3_1" + "n3_2" + "n3_3") <= ("n6_4" + "n6_3" + "n6_6" + "n6_5" + "n6_0" + "n6_2" + "n6_1" + "n6_8" + "n6_7" + "n6_10" + "n6_9")) and (2 <= ("CstopOK_10" + "CstopOK_6" + "CstopOK_7" + "CstopOK_8" + "CstopOK_9" + "CstopOK_2" + "CstopOK_3" + "CstopOK_4" + "CstopOK_5" + "CstopOK_0" + "CstopOK_1")))) or (3 <= "Astart")) )


Unable to decide if query is satisfied.


timeout 5 verifypn -n -s OverApprox -x 16 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-15: not EF not ( ((((("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10") <= "a2") and ("a4" <= ("s5_1" + "s5_0" + "s5_3" + "s5_2" + "s5_6" + "s5_7" + "s5_4" + "s5_5" + "s5_10" + "s5_8" + "s5_9"))) and ((3 <= ("SstopOK_10" + "SstopOK_8" + "SstopOK_9" + "SstopOK_6" + "SstopOK_7" + "SstopOK_4" + "SstopOK_5" + "SstopOK_1" + "SstopOK_0" + "SstopOK_3" + "SstopOK_2")) or (("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1") <= ("s4_0" + "s4_3" + "s4_4" + "s4_1" + "s4_2" + "s4_7" + "s4_8" + "s4_5" + "s4_6" + "s4_10" + "s4_9")))) or not(not((("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9") <= "malicious_reservoir")))) )


Unable to decide if query is satisfied.


timeout 40 verifypn -n -d -r 1 -x 1 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-0: not EF not ( ((((("s4_0" + "s4_3" + "s4_4" + "s4_1" + "s4_2" + "s4_7" + "s4_8" + "s4_5" + "s4_6" + "s4_10" + "s4_9") <= ("Cstart_1" + "Cstart_0" + "Cstart_9" + "Cstart_8" + "Cstart_7" + "Cstart_6" + "Cstart_5" + "Cstart_4" + "Cstart_3" + "Cstart_2" + "Cstart_10")) or (("s6_1" + "s6_0" + "s6_3" + "s6_2" + "s6_5" + "s6_4" + "s6_7" + "s6_6" + "s6_9" + "s6_8" + "s6_10") <= ("s6_1" + "s6_0" + "s6_3" + "s6_2" + "s6_5" + "s6_4" + "s6_7" + "s6_6" + "s6_9" + "s6_8" + "s6_10"))) or not((("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10") <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")))) or (((2 <= ("s2_2" + "s2_1" + "s2_0" + "s2_7" + "s2_8" + "s2_9" + "s2_10" + "s2_3" + "s2_4" + "s2_5" + "s2_6")) and (2 <= ("n6_4" + "n6_3" + "n6_6" + "n6_5" + "n6_0" + "n6_2" + "n6_1" + "n6_8" + "n6_7" + "n6_10" + "n6_9"))) or ((("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10") <= ("n8_9_1" + "n8_8_1" + "n8_0_2" + "n8_10_1" + "n8_5_1" + "n8_4_1" + "n8_7_1" + "n8_6_1" + "n8_6_2" + "n8_5_2" + "n8_8_2" + "n8_7_2" + "n8_2_2" + "n8_1_2" + "n8_4_2" + "n8_3_2" + "n8_3_0" + "n8_4_0" + "n8_5_0" + "n8_6_0" + "n8_0_0" + "n8_1_0" + "n8_2_0" + "n8_0_1" + "n8_1_1" + "n8_2_1" + "n8_3_1" + "n8_7_0" + "n8_8_0" + "n8_9_0" + "n8_10_0" + "n8_2_5" + "n8_3_5" + "n8_0_5" + "n8_1_5" + "n8_6_5" + "n8_7_5" + "n8_4_5" + "n8_5_5" + "n8_5_4" + "n8_6_4" + "n8_3_4" + "n8_4_4" + "n8_9_4" + "n8_10_4" + "n8_7_4" + "n8_8_4" + "n8_9_3" + "n8_8_3" + "n8_7_3" + "n8_6_3" + "n8_2_4" + "n8_1_4" + "n8_0_4" + "n8_10_3" + "n8_1_3" + "n8_0_3" + "n8_10_2" + "n8_9_2" + "n8_5_3" + "n8_4_3" + "n8_3_3" + "n8_2_3" + "n8_10_7" + "n8_0_8" + "n8_1_8" + "n8_2_8" + "n8_3_8" + "n8_4_8" + "n8_5_8" + "n8_6_8" + "n8_2_7" + "n8_3_7" + "n8_4_7" + "n8_5_7" + "n8_6_7" + "n8_7_7" + "n8_8_7" + "n8_9_7" + "n8_6_6" + "n8_5_6" + "n8_8_6" + "n8_7_6" + "n8_10_6" + "n8_9_6" + "n8_1_7" + "n8_0_7" + "n8_9_5" + "n8_8_5" + "n8_0_6" + "n8_10_5" + "n8_2_6" + "n8_1_6" + "n8_4_6" + "n8_3_6" + "n8_9_10" + "n8_10_10" + "n8_7_10" + "n8_8_10" + "n8_5_10" + "n8_6_10" + "n8_3_10" + "n8_4_10" + "n8_1_10" + "n8_2_10" + "n8_0_10" + "n8_10_9" + "n8_9_9" + "n8_8_9" + "n8_7_9" + "n8_6_9" + "n8_5_9" + "n8_4_9" + "n8_3_9" + "n8_2_9" + "n8_1_9" + "n8_0_9" + "n8_10_8" + "n8_9_8" + "n8_8_8" + "n8_7_8")) and (3 <= ("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10"))))) )

timeout 40 verifypn -n -d -r 1 -x 2 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-1: not EF not ( (((("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8") <= ("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8")) and not((3 <= ("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10")))) or (((2 <= "AstopOK") and (2 <= ("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8"))) and ((1 <= ("s5_1" + "s5_0" + "s5_3" + "s5_2" + "s5_6" + "s5_7" + "s5_4" + "s5_5" + "s5_10" + "s5_8" + "s5_9")) and (("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10") <= ("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10"))))) )

timeout 40 verifypn -n -d -r 1 -x 3 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-2: EF ( (not(((("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10") <= ("s5_1" + "s5_0" + "s5_3" + "s5_2" + "s5_6" + "s5_7" + "s5_4" + "s5_5" + "s5_10" + "s5_8" + "s5_9")) or (3 <= "SstopAbort"))) and (("a1" <= "a4") or (("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10") <= ("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10")))) )

FORMULA QuasiCertifProtocol-COL-10-ReachabilityCardinality-2 TRUE TECHNIQUES SEQUENTIAL_PROCESSING EXPLICIT STRUCTURAL_REDUCTION

Query is satisfied.


timeout 40 verifypn -n -d -r 1 -x 4 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-3: not EF not ( ((((("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10") <= "CstopAbort") or (("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10") <= "AstopAbort")) and ((1 <= "a5") or (("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8") <= ("n3_8" + "n3_9" + "n3_10" + "n3_4" + "n3_5" + "n3_6" + "n3_7" + "n3_0" + "n3_1" + "n3_2" + "n3_3")))) or (2 <= ("n3_8" + "n3_9" + "n3_10" + "n3_4" + "n3_5" + "n3_6" + "n3_7" + "n3_0" + "n3_1" + "n3_2" + "n3_3"))) )

timeout 40 verifypn -n -d -r 1 -x 6 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-5: EF ( (2 <= ("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9")) )

FORMULA QuasiCertifProtocol-COL-10-ReachabilityCardinality-5 TRUE TECHNIQUES SEQUENTIAL_PROCESSING EXPLICIT STRUCTURAL_REDUCTION

Query is satisfied.


timeout 40 verifypn -n -d -r 1 -x 7 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-6: EF ( not(not((("CstopAbort" <= ("s2_2" + "s2_1" + "s2_0" + "s2_7" + "s2_8" + "s2_9" + "s2_10" + "s2_3" + "s2_4" + "s2_5" + "s2_6")) and (1 <= "a3")))) )

FORMULA QuasiCertifProtocol-COL-10-ReachabilityCardinality-6 TRUE TECHNIQUES SEQUENTIAL_PROCESSING EXPLICIT STRUCTURAL_REDUCTION

Query is satisfied.


timeout 40 verifypn -n -d -r 1 -x 8 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-7: not EF not ( (not(((2 <= ("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9")) or (1 <= "SstopAbort"))) or not(not(("a5" <= ("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10"))))) )

timeout 40 verifypn -n -d -r 1 -x 9 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-8: EF ( ((((1 <= ("n1_4" + "n1_5" + "n1_2" + "n1_3" + "n1_0" + "n1_1" + "n1_10" + "n1_7" + "n1_6" + "n1_9" + "n1_8")) and (3 <= ("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10"))) and ((2 <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")) or (2 <= ("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10")))) and (((("CstopOK_10" + "CstopOK_6" + "CstopOK_7" + "CstopOK_8" + "CstopOK_9" + "CstopOK_2" + "CstopOK_3" + "CstopOK_4" + "CstopOK_5" + "CstopOK_0" + "CstopOK_1") <= ("s4_0" + "s4_3" + "s4_4" + "s4_1" + "s4_2" + "s4_7" + "s4_8" + "s4_5" + "s4_6" + "s4_10" + "s4_9")) or (3 <= ("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10"))) or ((("n8_9_1" + "n8_8_1" + "n8_0_2" + "n8_10_1" + "n8_5_1" + "n8_4_1" + "n8_7_1" + "n8_6_1" + "n8_6_2" + "n8_5_2" + "n8_8_2" + "n8_7_2" + "n8_2_2" + "n8_1_2" + "n8_4_2" + "n8_3_2" + "n8_3_0" + "n8_4_0" + "n8_5_0" + "n8_6_0" + "n8_0_0" + "n8_1_0" + "n8_2_0" + "n8_0_1" + "n8_1_1" + "n8_2_1" + "n8_3_1" + "n8_7_0" + "n8_8_0" + "n8_9_0" + "n8_10_0" + "n8_2_5" + "n8_3_5" + "n8_0_5" + "n8_1_5" + "n8_6_5" + "n8_7_5" + "n8_4_5" + "n8_5_5" + "n8_5_4" + "n8_6_4" + "n8_3_4" + "n8_4_4" + "n8_9_4" + "n8_10_4" + "n8_7_4" + "n8_8_4" + "n8_9_3" + "n8_8_3" + "n8_7_3" + "n8_6_3" + "n8_2_4" + "n8_1_4" + "n8_0_4" + "n8_10_3" + "n8_1_3" + "n8_0_3" + "n8_10_2" + "n8_9_2" + "n8_5_3" + "n8_4_3" + "n8_3_3" + "n8_2_3" + "n8_10_7" + "n8_0_8" + "n8_1_8" + "n8_2_8" + "n8_3_8" + "n8_4_8" + "n8_5_8" + "n8_6_8" + "n8_2_7" + "n8_3_7" + "n8_4_7" + "n8_5_7" + "n8_6_7" + "n8_7_7" + "n8_8_7" + "n8_9_7" + "n8_6_6" + "n8_5_6" + "n8_8_6" + "n8_7_6" + "n8_10_6" + "n8_9_6" + "n8_1_7" + "n8_0_7" + "n8_9_5" + "n8_8_5" + "n8_0_6" + "n8_10_5" + "n8_2_6" + "n8_1_6" + "n8_4_6" + "n8_3_6" + "n8_9_10" + "n8_10_10" + "n8_7_10" + "n8_8_10" + "n8_5_10" + "n8_6_10" + "n8_3_10" + "n8_4_10" + "n8_1_10" + "n8_2_10" + "n8_0_10" + "n8_10_9" + "n8_9_9" + "n8_8_9" + "n8_7_9" + "n8_6_9" + "n8_5_9" + "n8_4_9" + "n8_3_9" + "n8_2_9" + "n8_1_9" + "n8_0_9" + "n8_10_8" + "n8_9_8" + "n8_8_8" + "n8_7_8") <= ("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10")) or (("c1_0" + "c1_1" + "c1_2" + "c1_3" + "c1_4" + "c1_5" + "c1_6" + "c1_7" + "c1_8" + "c1_9" + "c1_10") <= ("s6_1" + "s6_0" + "s6_3" + "s6_2" + "s6_5" + "s6_4" + "s6_7" + "s6_6" + "s6_9" + "s6_8" + "s6_10"))))) )

timeout 40 verifypn -n -d -r 1 -x 10 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-9: not EF not ( not((3 <= ("s2_2" + "s2_1" + "s2_0" + "s2_7" + "s2_8" + "s2_9" + "s2_10" + "s2_3" + "s2_4" + "s2_5" + "s2_6"))) )

FORMULA QuasiCertifProtocol-COL-10-ReachabilityCardinality-9 FALSE TECHNIQUES SEQUENTIAL_PROCESSING EXPLICIT STRUCTURAL_REDUCTION

Query is NOT satisfied.


timeout 40 verifypn -n -d -r 1 -x 11 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-10: not EF not ( ((not(("malicious_reservoir" <= ("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8"))) or not((("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10") <= ("n1_4" + "n1_5" + "n1_2" + "n1_3" + "n1_0" + "n1_1" + "n1_10" + "n1_7" + "n1_6" + "n1_9" + "n1_8")))) or (not((1 <= ("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9"))) and ((1 <= "malicious_reservoir") or ("CstopAbort" <= ("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10"))))) )

timeout 40 verifypn -n -d -r 1 -x 12 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-11: not EF not ( ((("s2_2" + "s2_1" + "s2_0" + "s2_7" + "s2_8" + "s2_9" + "s2_10" + "s2_3" + "s2_4" + "s2_5" + "s2_6") <= ("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10")) or not((("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10") <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")))) )

FORMULA QuasiCertifProtocol-COL-10-ReachabilityCardinality-11 FALSE TECHNIQUES SEQUENTIAL_PROCESSING EXPLICIT STRUCTURAL_REDUCTION

Query is NOT satisfied.


timeout 40 verifypn -n -d -r 1 -x 13 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-12: not EF not ( not((((("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9") <= ("n6_4" + "n6_3" + "n6_6" + "n6_5" + "n6_0" + "n6_2" + "n6_1" + "n6_8" + "n6_7" + "n6_10" + "n6_9")) and (("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10") <= ("s2_2" + "s2_1" + "s2_0" + "s2_7" + "s2_8" + "s2_9" + "s2_10" + "s2_3" + "s2_4" + "s2_5" + "s2_6"))) or not((("s4_0" + "s4_3" + "s4_4" + "s4_1" + "s4_2" + "s4_7" + "s4_8" + "s4_5" + "s4_6" + "s4_10" + "s4_9") <= ("Cstart_1" + "Cstart_0" + "Cstart_9" + "Cstart_8" + "Cstart_7" + "Cstart_6" + "Cstart_5" + "Cstart_4" + "Cstart_3" + "Cstart_2" + "Cstart_10"))))) )

FORMULA QuasiCertifProtocol-COL-10-ReachabilityCardinality-12 FALSE TECHNIQUES SEQUENTIAL_PROCESSING EXPLICIT STRUCTURAL_REDUCTION

Query is NOT satisfied.


timeout 40 verifypn -n -d -r 1 -x 14 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-13: not EF not ( ((((("s5_1" + "s5_0" + "s5_3" + "s5_2" + "s5_6" + "s5_7" + "s5_4" + "s5_5" + "s5_10" + "s5_8" + "s5_9") <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")) and (("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10") <= "malicious_reservoir")) or (("a2" <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")) or (2 <= "a5"))) or (("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8") <= "a4")) )

timeout 40 verifypn -n -d -r 1 -x 15 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-14: EF ( ((not((("c1_0" + "c1_1" + "c1_2" + "c1_3" + "c1_4" + "c1_5" + "c1_6" + "c1_7" + "c1_8" + "c1_9" + "c1_10") <= "a5")) or ((("n3_8" + "n3_9" + "n3_10" + "n3_4" + "n3_5" + "n3_6" + "n3_7" + "n3_0" + "n3_1" + "n3_2" + "n3_3") <= ("n6_4" + "n6_3" + "n6_6" + "n6_5" + "n6_0" + "n6_2" + "n6_1" + "n6_8" + "n6_7" + "n6_10" + "n6_9")) and (2 <= ("CstopOK_10" + "CstopOK_6" + "CstopOK_7" + "CstopOK_8" + "CstopOK_9" + "CstopOK_2" + "CstopOK_3" + "CstopOK_4" + "CstopOK_5" + "CstopOK_0" + "CstopOK_1")))) or (3 <= "Astart")) )

timeout 40 verifypn -n -d -r 1 -x 16 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-15: not EF not ( ((((("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10") <= "a2") and ("a4" <= ("s5_1" + "s5_0" + "s5_3" + "s5_2" + "s5_6" + "s5_7" + "s5_4" + "s5_5" + "s5_10" + "s5_8" + "s5_9"))) and ((3 <= ("SstopOK_10" + "SstopOK_8" + "SstopOK_9" + "SstopOK_6" + "SstopOK_7" + "SstopOK_4" + "SstopOK_5" + "SstopOK_1" + "SstopOK_0" + "SstopOK_3" + "SstopOK_2")) or (("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1") <= ("s4_0" + "s4_3" + "s4_4" + "s4_1" + "s4_2" + "s4_7" + "s4_8" + "s4_5" + "s4_6" + "s4_10" + "s4_9")))) or not(not((("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9") <= "malicious_reservoir")))) )

timeout 30 verifypn -n -d -r 1 -s BFS -x 1 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-0: not EF not ( ((((("s4_0" + "s4_3" + "s4_4" + "s4_1" + "s4_2" + "s4_7" + "s4_8" + "s4_5" + "s4_6" + "s4_10" + "s4_9") <= ("Cstart_1" + "Cstart_0" + "Cstart_9" + "Cstart_8" + "Cstart_7" + "Cstart_6" + "Cstart_5" + "Cstart_4" + "Cstart_3" + "Cstart_2" + "Cstart_10")) or (("s6_1" + "s6_0" + "s6_3" + "s6_2" + "s6_5" + "s6_4" + "s6_7" + "s6_6" + "s6_9" + "s6_8" + "s6_10") <= ("s6_1" + "s6_0" + "s6_3" + "s6_2" + "s6_5" + "s6_4" + "s6_7" + "s6_6" + "s6_9" + "s6_8" + "s6_10"))) or not((("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10") <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")))) or (((2 <= ("s2_2" + "s2_1" + "s2_0" + "s2_7" + "s2_8" + "s2_9" + "s2_10" + "s2_3" + "s2_4" + "s2_5" + "s2_6")) and (2 <= ("n6_4" + "n6_3" + "n6_6" + "n6_5" + "n6_0" + "n6_2" + "n6_1" + "n6_8" + "n6_7" + "n6_10" + "n6_9"))) or ((("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10") <= ("n8_9_1" + "n8_8_1" + "n8_0_2" + "n8_10_1" + "n8_5_1" + "n8_4_1" + "n8_7_1" + "n8_6_1" + "n8_6_2" + "n8_5_2" + "n8_8_2" + "n8_7_2" + "n8_2_2" + "n8_1_2" + "n8_4_2" + "n8_3_2" + "n8_3_0" + "n8_4_0" + "n8_5_0" + "n8_6_0" + "n8_0_0" + "n8_1_0" + "n8_2_0" + "n8_0_1" + "n8_1_1" + "n8_2_1" + "n8_3_1" + "n8_7_0" + "n8_8_0" + "n8_9_0" + "n8_10_0" + "n8_2_5" + "n8_3_5" + "n8_0_5" + "n8_1_5" + "n8_6_5" + "n8_7_5" + "n8_4_5" + "n8_5_5" + "n8_5_4" + "n8_6_4" + "n8_3_4" + "n8_4_4" + "n8_9_4" + "n8_10_4" + "n8_7_4" + "n8_8_4" + "n8_9_3" + "n8_8_3" + "n8_7_3" + "n8_6_3" + "n8_2_4" + "n8_1_4" + "n8_0_4" + "n8_10_3" + "n8_1_3" + "n8_0_3" + "n8_10_2" + "n8_9_2" + "n8_5_3" + "n8_4_3" + "n8_3_3" + "n8_2_3" + "n8_10_7" + "n8_0_8" + "n8_1_8" + "n8_2_8" + "n8_3_8" + "n8_4_8" + "n8_5_8" + "n8_6_8" + "n8_2_7" + "n8_3_7" + "n8_4_7" + "n8_5_7" + "n8_6_7" + "n8_7_7" + "n8_8_7" + "n8_9_7" + "n8_6_6" + "n8_5_6" + "n8_8_6" + "n8_7_6" + "n8_10_6" + "n8_9_6" + "n8_1_7" + "n8_0_7" + "n8_9_5" + "n8_8_5" + "n8_0_6" + "n8_10_5" + "n8_2_6" + "n8_1_6" + "n8_4_6" + "n8_3_6" + "n8_9_10" + "n8_10_10" + "n8_7_10" + "n8_8_10" + "n8_5_10" + "n8_6_10" + "n8_3_10" + "n8_4_10" + "n8_1_10" + "n8_2_10" + "n8_0_10" + "n8_10_9" + "n8_9_9" + "n8_8_9" + "n8_7_9" + "n8_6_9" + "n8_5_9" + "n8_4_9" + "n8_3_9" + "n8_2_9" + "n8_1_9" + "n8_0_9" + "n8_10_8" + "n8_9_8" + "n8_8_8" + "n8_7_8")) and (3 <= ("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10"))))) )

timeout 30 verifypn -n -d -r 1 -s BFS -x 2 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-1: not EF not ( (((("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8") <= ("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8")) and not((3 <= ("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10")))) or (((2 <= "AstopOK") and (2 <= ("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8"))) and ((1 <= ("s5_1" + "s5_0" + "s5_3" + "s5_2" + "s5_6" + "s5_7" + "s5_4" + "s5_5" + "s5_10" + "s5_8" + "s5_9")) and (("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10") <= ("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10"))))) )

timeout 30 verifypn -n -d -r 1 -s BFS -x 4 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-3: not EF not ( ((((("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10") <= "CstopAbort") or (("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10") <= "AstopAbort")) and ((1 <= "a5") or (("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8") <= ("n3_8" + "n3_9" + "n3_10" + "n3_4" + "n3_5" + "n3_6" + "n3_7" + "n3_0" + "n3_1" + "n3_2" + "n3_3")))) or (2 <= ("n3_8" + "n3_9" + "n3_10" + "n3_4" + "n3_5" + "n3_6" + "n3_7" + "n3_0" + "n3_1" + "n3_2" + "n3_3"))) )

timeout 30 verifypn -n -d -r 1 -s BFS -x 8 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-7: not EF not ( (not(((2 <= ("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9")) or (1 <= "SstopAbort"))) or not(not(("a5" <= ("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10"))))) )

timeout 30 verifypn -n -d -r 1 -s BFS -x 9 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-8: EF ( ((((1 <= ("n1_4" + "n1_5" + "n1_2" + "n1_3" + "n1_0" + "n1_1" + "n1_10" + "n1_7" + "n1_6" + "n1_9" + "n1_8")) and (3 <= ("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10"))) and ((2 <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")) or (2 <= ("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10")))) and (((("CstopOK_10" + "CstopOK_6" + "CstopOK_7" + "CstopOK_8" + "CstopOK_9" + "CstopOK_2" + "CstopOK_3" + "CstopOK_4" + "CstopOK_5" + "CstopOK_0" + "CstopOK_1") <= ("s4_0" + "s4_3" + "s4_4" + "s4_1" + "s4_2" + "s4_7" + "s4_8" + "s4_5" + "s4_6" + "s4_10" + "s4_9")) or (3 <= ("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10"))) or ((("n8_9_1" + "n8_8_1" + "n8_0_2" + "n8_10_1" + "n8_5_1" + "n8_4_1" + "n8_7_1" + "n8_6_1" + "n8_6_2" + "n8_5_2" + "n8_8_2" + "n8_7_2" + "n8_2_2" + "n8_1_2" + "n8_4_2" + "n8_3_2" + "n8_3_0" + "n8_4_0" + "n8_5_0" + "n8_6_0" + "n8_0_0" + "n8_1_0" + "n8_2_0" + "n8_0_1" + "n8_1_1" + "n8_2_1" + "n8_3_1" + "n8_7_0" + "n8_8_0" + "n8_9_0" + "n8_10_0" + "n8_2_5" + "n8_3_5" + "n8_0_5" + "n8_1_5" + "n8_6_5" + "n8_7_5" + "n8_4_5" + "n8_5_5" + "n8_5_4" + "n8_6_4" + "n8_3_4" + "n8_4_4" + "n8_9_4" + "n8_10_4" + "n8_7_4" + "n8_8_4" + "n8_9_3" + "n8_8_3" + "n8_7_3" + "n8_6_3" + "n8_2_4" + "n8_1_4" + "n8_0_4" + "n8_10_3" + "n8_1_3" + "n8_0_3" + "n8_10_2" + "n8_9_2" + "n8_5_3" + "n8_4_3" + "n8_3_3" + "n8_2_3" + "n8_10_7" + "n8_0_8" + "n8_1_8" + "n8_2_8" + "n8_3_8" + "n8_4_8" + "n8_5_8" + "n8_6_8" + "n8_2_7" + "n8_3_7" + "n8_4_7" + "n8_5_7" + "n8_6_7" + "n8_7_7" + "n8_8_7" + "n8_9_7" + "n8_6_6" + "n8_5_6" + "n8_8_6" + "n8_7_6" + "n8_10_6" + "n8_9_6" + "n8_1_7" + "n8_0_7" + "n8_9_5" + "n8_8_5" + "n8_0_6" + "n8_10_5" + "n8_2_6" + "n8_1_6" + "n8_4_6" + "n8_3_6" + "n8_9_10" + "n8_10_10" + "n8_7_10" + "n8_8_10" + "n8_5_10" + "n8_6_10" + "n8_3_10" + "n8_4_10" + "n8_1_10" + "n8_2_10" + "n8_0_10" + "n8_10_9" + "n8_9_9" + "n8_8_9" + "n8_7_9" + "n8_6_9" + "n8_5_9" + "n8_4_9" + "n8_3_9" + "n8_2_9" + "n8_1_9" + "n8_0_9" + "n8_10_8" + "n8_9_8" + "n8_8_8" + "n8_7_8") <= ("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10")) or (("c1_0" + "c1_1" + "c1_2" + "c1_3" + "c1_4" + "c1_5" + "c1_6" + "c1_7" + "c1_8" + "c1_9" + "c1_10") <= ("s6_1" + "s6_0" + "s6_3" + "s6_2" + "s6_5" + "s6_4" + "s6_7" + "s6_6" + "s6_9" + "s6_8" + "s6_10"))))) )

timeout 30 verifypn -n -d -r 1 -s BFS -x 11 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-10: not EF not ( ((not(("malicious_reservoir" <= ("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8"))) or not((("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10") <= ("n1_4" + "n1_5" + "n1_2" + "n1_3" + "n1_0" + "n1_1" + "n1_10" + "n1_7" + "n1_6" + "n1_9" + "n1_8")))) or (not((1 <= ("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9"))) and ((1 <= "malicious_reservoir") or ("CstopAbort" <= ("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10"))))) )

timeout 30 verifypn -n -d -r 1 -s BFS -x 14 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-13: not EF not ( ((((("s5_1" + "s5_0" + "s5_3" + "s5_2" + "s5_6" + "s5_7" + "s5_4" + "s5_5" + "s5_10" + "s5_8" + "s5_9") <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")) and (("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10") <= "malicious_reservoir")) or (("a2" <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")) or (2 <= "a5"))) or (("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8") <= "a4")) )

timeout 30 verifypn -n -d -r 1 -s BFS -x 15 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-14: EF ( ((not((("c1_0" + "c1_1" + "c1_2" + "c1_3" + "c1_4" + "c1_5" + "c1_6" + "c1_7" + "c1_8" + "c1_9" + "c1_10") <= "a5")) or ((("n3_8" + "n3_9" + "n3_10" + "n3_4" + "n3_5" + "n3_6" + "n3_7" + "n3_0" + "n3_1" + "n3_2" + "n3_3") <= ("n6_4" + "n6_3" + "n6_6" + "n6_5" + "n6_0" + "n6_2" + "n6_1" + "n6_8" + "n6_7" + "n6_10" + "n6_9")) and (2 <= ("CstopOK_10" + "CstopOK_6" + "CstopOK_7" + "CstopOK_8" + "CstopOK_9" + "CstopOK_2" + "CstopOK_3" + "CstopOK_4" + "CstopOK_5" + "CstopOK_0" + "CstopOK_1")))) or (3 <= "Astart")) )

timeout 30 verifypn -n -d -r 1 -s BFS -x 16 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-15: not EF not ( ((((("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10") <= "a2") and ("a4" <= ("s5_1" + "s5_0" + "s5_3" + "s5_2" + "s5_6" + "s5_7" + "s5_4" + "s5_5" + "s5_10" + "s5_8" + "s5_9"))) and ((3 <= ("SstopOK_10" + "SstopOK_8" + "SstopOK_9" + "SstopOK_6" + "SstopOK_7" + "SstopOK_4" + "SstopOK_5" + "SstopOK_1" + "SstopOK_0" + "SstopOK_3" + "SstopOK_2")) or (("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1") <= ("s4_0" + "s4_3" + "s4_4" + "s4_1" + "s4_2" + "s4_7" + "s4_8" + "s4_5" + "s4_6" + "s4_10" + "s4_9")))) or not(not((("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9") <= "malicious_reservoir")))) )

timeout 300 verifypn -n -d -r 1 -s DFS -x 1 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-0: not EF not ( ((((("s4_0" + "s4_3" + "s4_4" + "s4_1" + "s4_2" + "s4_7" + "s4_8" + "s4_5" + "s4_6" + "s4_10" + "s4_9") <= ("Cstart_1" + "Cstart_0" + "Cstart_9" + "Cstart_8" + "Cstart_7" + "Cstart_6" + "Cstart_5" + "Cstart_4" + "Cstart_3" + "Cstart_2" + "Cstart_10")) or (("s6_1" + "s6_0" + "s6_3" + "s6_2" + "s6_5" + "s6_4" + "s6_7" + "s6_6" + "s6_9" + "s6_8" + "s6_10") <= ("s6_1" + "s6_0" + "s6_3" + "s6_2" + "s6_5" + "s6_4" + "s6_7" + "s6_6" + "s6_9" + "s6_8" + "s6_10"))) or not((("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10") <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")))) or (((2 <= ("s2_2" + "s2_1" + "s2_0" + "s2_7" + "s2_8" + "s2_9" + "s2_10" + "s2_3" + "s2_4" + "s2_5" + "s2_6")) and (2 <= ("n6_4" + "n6_3" + "n6_6" + "n6_5" + "n6_0" + "n6_2" + "n6_1" + "n6_8" + "n6_7" + "n6_10" + "n6_9"))) or ((("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10") <= ("n8_9_1" + "n8_8_1" + "n8_0_2" + "n8_10_1" + "n8_5_1" + "n8_4_1" + "n8_7_1" + "n8_6_1" + "n8_6_2" + "n8_5_2" + "n8_8_2" + "n8_7_2" + "n8_2_2" + "n8_1_2" + "n8_4_2" + "n8_3_2" + "n8_3_0" + "n8_4_0" + "n8_5_0" + "n8_6_0" + "n8_0_0" + "n8_1_0" + "n8_2_0" + "n8_0_1" + "n8_1_1" + "n8_2_1" + "n8_3_1" + "n8_7_0" + "n8_8_0" + "n8_9_0" + "n8_10_0" + "n8_2_5" + "n8_3_5" + "n8_0_5" + "n8_1_5" + "n8_6_5" + "n8_7_5" + "n8_4_5" + "n8_5_5" + "n8_5_4" + "n8_6_4" + "n8_3_4" + "n8_4_4" + "n8_9_4" + "n8_10_4" + "n8_7_4" + "n8_8_4" + "n8_9_3" + "n8_8_3" + "n8_7_3" + "n8_6_3" + "n8_2_4" + "n8_1_4" + "n8_0_4" + "n8_10_3" + "n8_1_3" + "n8_0_3" + "n8_10_2" + "n8_9_2" + "n8_5_3" + "n8_4_3" + "n8_3_3" + "n8_2_3" + "n8_10_7" + "n8_0_8" + "n8_1_8" + "n8_2_8" + "n8_3_8" + "n8_4_8" + "n8_5_8" + "n8_6_8" + "n8_2_7" + "n8_3_7" + "n8_4_7" + "n8_5_7" + "n8_6_7" + "n8_7_7" + "n8_8_7" + "n8_9_7" + "n8_6_6" + "n8_5_6" + "n8_8_6" + "n8_7_6" + "n8_10_6" + "n8_9_6" + "n8_1_7" + "n8_0_7" + "n8_9_5" + "n8_8_5" + "n8_0_6" + "n8_10_5" + "n8_2_6" + "n8_1_6" + "n8_4_6" + "n8_3_6" + "n8_9_10" + "n8_10_10" + "n8_7_10" + "n8_8_10" + "n8_5_10" + "n8_6_10" + "n8_3_10" + "n8_4_10" + "n8_1_10" + "n8_2_10" + "n8_0_10" + "n8_10_9" + "n8_9_9" + "n8_8_9" + "n8_7_9" + "n8_6_9" + "n8_5_9" + "n8_4_9" + "n8_3_9" + "n8_2_9" + "n8_1_9" + "n8_0_9" + "n8_10_8" + "n8_9_8" + "n8_8_8" + "n8_7_8")) and (3 <= ("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10"))))) )

timeout 300 verifypn -n -d -r 1 -s DFS -x 2 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-1: not EF not ( (((("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8") <= ("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8")) and not((3 <= ("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10")))) or (((2 <= "AstopOK") and (2 <= ("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8"))) and ((1 <= ("s5_1" + "s5_0" + "s5_3" + "s5_2" + "s5_6" + "s5_7" + "s5_4" + "s5_5" + "s5_10" + "s5_8" + "s5_9")) and (("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10") <= ("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10"))))) )

timeout 300 verifypn -n -d -r 1 -s DFS -x 4 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-3: not EF not ( ((((("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10") <= "CstopAbort") or (("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10") <= "AstopAbort")) and ((1 <= "a5") or (("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8") <= ("n3_8" + "n3_9" + "n3_10" + "n3_4" + "n3_5" + "n3_6" + "n3_7" + "n3_0" + "n3_1" + "n3_2" + "n3_3")))) or (2 <= ("n3_8" + "n3_9" + "n3_10" + "n3_4" + "n3_5" + "n3_6" + "n3_7" + "n3_0" + "n3_1" + "n3_2" + "n3_3"))) )


timeout 300 verifypn -n -d -r 1 -s DFS -x 8 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-7: not EF not ( (not(((2 <= ("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9")) or (1 <= "SstopAbort"))) or not(not(("a5" <= ("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10"))))) )

timeout 300 verifypn -n -d -r 1 -s DFS -x 9 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-8: EF ( ((((1 <= ("n1_4" + "n1_5" + "n1_2" + "n1_3" + "n1_0" + "n1_1" + "n1_10" + "n1_7" + "n1_6" + "n1_9" + "n1_8")) and (3 <= ("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10"))) and ((2 <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")) or (2 <= ("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10")))) and (((("CstopOK_10" + "CstopOK_6" + "CstopOK_7" + "CstopOK_8" + "CstopOK_9" + "CstopOK_2" + "CstopOK_3" + "CstopOK_4" + "CstopOK_5" + "CstopOK_0" + "CstopOK_1") <= ("s4_0" + "s4_3" + "s4_4" + "s4_1" + "s4_2" + "s4_7" + "s4_8" + "s4_5" + "s4_6" + "s4_10" + "s4_9")) or (3 <= ("Sstart_4" + "Sstart_5" + "Sstart_6" + "Sstart_7" + "Sstart_0" + "Sstart_1" + "Sstart_2" + "Sstart_3" + "Sstart_9" + "Sstart_8" + "Sstart_10"))) or ((("n8_9_1" + "n8_8_1" + "n8_0_2" + "n8_10_1" + "n8_5_1" + "n8_4_1" + "n8_7_1" + "n8_6_1" + "n8_6_2" + "n8_5_2" + "n8_8_2" + "n8_7_2" + "n8_2_2" + "n8_1_2" + "n8_4_2" + "n8_3_2" + "n8_3_0" + "n8_4_0" + "n8_5_0" + "n8_6_0" + "n8_0_0" + "n8_1_0" + "n8_2_0" + "n8_0_1" + "n8_1_1" + "n8_2_1" + "n8_3_1" + "n8_7_0" + "n8_8_0" + "n8_9_0" + "n8_10_0" + "n8_2_5" + "n8_3_5" + "n8_0_5" + "n8_1_5" + "n8_6_5" + "n8_7_5" + "n8_4_5" + "n8_5_5" + "n8_5_4" + "n8_6_4" + "n8_3_4" + "n8_4_4" + "n8_9_4" + "n8_10_4" + "n8_7_4" + "n8_8_4" + "n8_9_3" + "n8_8_3" + "n8_7_3" + "n8_6_3" + "n8_2_4" + "n8_1_4" + "n8_0_4" + "n8_10_3" + "n8_1_3" + "n8_0_3" + "n8_10_2" + "n8_9_2" + "n8_5_3" + "n8_4_3" + "n8_3_3" + "n8_2_3" + "n8_10_7" + "n8_0_8" + "n8_1_8" + "n8_2_8" + "n8_3_8" + "n8_4_8" + "n8_5_8" + "n8_6_8" + "n8_2_7" + "n8_3_7" + "n8_4_7" + "n8_5_7" + "n8_6_7" + "n8_7_7" + "n8_8_7" + "n8_9_7" + "n8_6_6" + "n8_5_6" + "n8_8_6" + "n8_7_6" + "n8_10_6" + "n8_9_6" + "n8_1_7" + "n8_0_7" + "n8_9_5" + "n8_8_5" + "n8_0_6" + "n8_10_5" + "n8_2_6" + "n8_1_6" + "n8_4_6" + "n8_3_6" + "n8_9_10" + "n8_10_10" + "n8_7_10" + "n8_8_10" + "n8_5_10" + "n8_6_10" + "n8_3_10" + "n8_4_10" + "n8_1_10" + "n8_2_10" + "n8_0_10" + "n8_10_9" + "n8_9_9" + "n8_8_9" + "n8_7_9" + "n8_6_9" + "n8_5_9" + "n8_4_9" + "n8_3_9" + "n8_2_9" + "n8_1_9" + "n8_0_9" + "n8_10_8" + "n8_9_8" + "n8_8_8" + "n8_7_8") <= ("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10")) or (("c1_0" + "c1_1" + "c1_2" + "c1_3" + "c1_4" + "c1_5" + "c1_6" + "c1_7" + "c1_8" + "c1_9" + "c1_10") <= ("s6_1" + "s6_0" + "s6_3" + "s6_2" + "s6_5" + "s6_4" + "s6_7" + "s6_6" + "s6_9" + "s6_8" + "s6_10"))))) )

timeout 300 verifypn -n -d -r 1 -s DFS -x 11 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-10: not EF not ( ((not(("malicious_reservoir" <= ("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8"))) or not((("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10") <= ("n1_4" + "n1_5" + "n1_2" + "n1_3" + "n1_0" + "n1_1" + "n1_10" + "n1_7" + "n1_6" + "n1_9" + "n1_8")))) or (not((1 <= ("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9"))) and ((1 <= "malicious_reservoir") or ("CstopAbort" <= ("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10"))))) )

timeout 300 verifypn -n -d -r 1 -s DFS -x 14 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-13: not EF not ( ((((("s5_1" + "s5_0" + "s5_3" + "s5_2" + "s5_6" + "s5_7" + "s5_4" + "s5_5" + "s5_10" + "s5_8" + "s5_9") <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")) and (("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10") <= "malicious_reservoir")) or (("a2" <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")) or (2 <= "a5"))) or (("n4_1" + "n4_2" + "n4_3" + "n4_4" + "n4_0" + "n4_9" + "n4_10" + "n4_5" + "n4_6" + "n4_7" + "n4_8") <= "a4")) )

timeout 300 verifypn -n -d -r 1 -s DFS -x 15 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-14: EF ( ((not((("c1_0" + "c1_1" + "c1_2" + "c1_3" + "c1_4" + "c1_5" + "c1_6" + "c1_7" + "c1_8" + "c1_9" + "c1_10") <= "a5")) or ((("n3_8" + "n3_9" + "n3_10" + "n3_4" + "n3_5" + "n3_6" + "n3_7" + "n3_0" + "n3_1" + "n3_2" + "n3_3") <= ("n6_4" + "n6_3" + "n6_6" + "n6_5" + "n6_0" + "n6_2" + "n6_1" + "n6_8" + "n6_7" + "n6_10" + "n6_9")) and (2 <= ("CstopOK_10" + "CstopOK_6" + "CstopOK_7" + "CstopOK_8" + "CstopOK_9" + "CstopOK_2" + "CstopOK_3" + "CstopOK_4" + "CstopOK_5" + "CstopOK_0" + "CstopOK_1")))) or (3 <= "Astart")) )


timeout 300 verifypn -n -d -r 1 -s DFS -x 16 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-15: not EF not ( ((((("n9_4_0" + "n9_3_0" + "n9_6_0" + "n9_5_0" + "n9_0_0" + "n9_2_0" + "n9_1_0" + "n9_2_1" + "n9_3_1" + "n9_0_1" + "n9_1_1" + "n9_9_0" + "n9_10_0" + "n9_7_0" + "n9_8_0" + "n9_10_1" + "n9_0_2" + "n9_8_1" + "n9_9_1" + "n9_6_1" + "n9_7_1" + "n9_4_1" + "n9_5_1" + "n9_8_2" + "n9_7_2" + "n9_6_2" + "n9_5_2" + "n9_4_2" + "n9_3_2" + "n9_2_2" + "n9_1_2" + "n9_5_3" + "n9_4_3" + "n9_3_3" + "n9_2_3" + "n9_1_3" + "n9_0_3" + "n9_10_2" + "n9_9_2" + "n9_4_4" + "n9_3_4" + "n9_6_4" + "n9_5_4" + "n9_8_4" + "n9_7_4" + "n9_10_4" + "n9_9_4" + "n9_7_3" + "n9_6_3" + "n9_9_3" + "n9_8_3" + "n9_0_4" + "n9_10_3" + "n9_2_4" + "n9_1_4" + "n9_8_5" + "n9_9_5" + "n9_10_5" + "n9_0_6" + "n9_1_6" + "n9_2_6" + "n9_3_6" + "n9_4_6" + "n9_0_5" + "n9_1_5" + "n9_2_5" + "n9_3_5" + "n9_4_5" + "n9_5_5" + "n9_6_5" + "n9_7_5" + "n9_5_7" + "n9_4_7" + "n9_3_7" + "n9_2_7" + "n9_9_7" + "n9_8_7" + "n9_7_7" + "n9_6_7" + "n9_8_6" + "n9_7_6" + "n9_6_6" + "n9_5_6" + "n9_1_7" + "n9_0_7" + "n9_10_6" + "n9_9_6" + "n9_9_8" + "n9_10_8" + "n9_7_8" + "n9_8_8" + "n9_2_9" + "n9_3_9" + "n9_0_9" + "n9_1_9" + "n9_1_8" + "n9_2_8" + "n9_10_7" + "n9_0_8" + "n9_5_8" + "n9_6_8" + "n9_3_8" + "n9_4_8" + "n9_6_10" + "n9_5_10" + "n9_8_10" + "n9_7_10" + "n9_2_10" + "n9_1_10" + "n9_4_10" + "n9_3_10" + "n9_9_9" + "n9_8_9" + "n9_0_10" + "n9_10_9" + "n9_5_9" + "n9_4_9" + "n9_7_9" + "n9_6_9" + "n9_9_10" + "n9_10_10") <= "a2") and ("a4" <= ("s5_1" + "s5_0" + "s5_3" + "s5_2" + "s5_6" + "s5_7" + "s5_4" + "s5_5" + "s5_10" + "s5_8" + "s5_9"))) and ((3 <= ("SstopOK_10" + "SstopOK_8" + "SstopOK_9" + "SstopOK_6" + "SstopOK_7" + "SstopOK_4" + "SstopOK_5" + "SstopOK_1" + "SstopOK_0" + "SstopOK_3" + "SstopOK_2")) or (("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1") <= ("s4_0" + "s4_3" + "s4_4" + "s4_1" + "s4_2" + "s4_7" + "s4_8" + "s4_5" + "s4_6" + "s4_10" + "s4_9")))) or not(not((("n7_0_0" + "n7_1_0" + "n7_2_0" + "n7_7_1" + "n7_6_1" + "n7_5_1" + "n7_4_1" + "n7_3_1" + "n7_2_1" + "n7_1_1" + "n7_0_1" + "n7_10_0" + "n7_9_0" + "n7_8_0" + "n7_7_0" + "n7_6_0" + "n7_5_0" + "n7_4_0" + "n7_3_0" + "n7_0_3" + "n7_1_3" + "n7_9_2" + "n7_10_2" + "n7_7_2" + "n7_8_2" + "n7_5_2" + "n7_6_2" + "n7_3_2" + "n7_4_2" + "n7_1_2" + "n7_2_2" + "n7_10_1" + "n7_0_2" + "n7_8_1" + "n7_9_1" + "n7_10_4" + "n7_9_4" + "n7_8_4" + "n7_7_4" + "n7_3_5" + "n7_2_5" + "n7_1_5" + "n7_0_5" + "n7_7_5" + "n7_6_5" + "n7_5_5" + "n7_4_5" + "n7_0_6" + "n7_10_5" + "n7_9_5" + "n7_8_5" + "n7_4_3" + "n7_5_3" + "n7_2_3" + "n7_3_3" + "n7_8_3" + "n7_9_3" + "n7_6_3" + "n7_7_3" + "n7_1_4" + "n7_2_4" + "n7_10_3" + "n7_0_4" + "n7_5_4" + "n7_6_4" + "n7_3_4" + "n7_4_4" + "n7_7_7" + "n7_6_7" + "n7_9_7" + "n7_8_7" + "n7_0_8" + "n7_10_7" + "n7_2_8" + "n7_1_8" + "n7_4_8" + "n7_3_8" + "n7_6_8" + "n7_5_8" + "n7_8_8" + "n7_7_8" + "n7_10_8" + "n7_9_8" + "n7_1_6" + "n7_2_6" + "n7_3_6" + "n7_4_6" + "n7_5_6" + "n7_6_6" + "n7_7_6" + "n7_8_6" + "n7_9_6" + "n7_10_6" + "n7_0_7" + "n7_1_7" + "n7_2_7" + "n7_3_7" + "n7_4_7" + "n7_5_7" + "n7_10_10" + "n7_9_10" + "n7_8_10" + "n7_7_10" + "n7_6_10" + "n7_5_10" + "n7_6_9" + "n7_7_9" + "n7_4_9" + "n7_5_9" + "n7_2_9" + "n7_3_9" + "n7_0_9" + "n7_1_9" + "n7_3_10" + "n7_4_10" + "n7_1_10" + "n7_2_10" + "n7_10_9" + "n7_0_10" + "n7_8_9" + "n7_9_9") <= "malicious_reservoir")))) )

timeout 7200 verifypn -n -d -r 1 -s DFS -x 1 model.pnml ReachabilityCardinality.xml
QuasiCertifProtocol-COL-10-ReachabilityCardinality-0: not EF not ( ((((("s4_0" + "s4_3" + "s4_4" + "s4_1" + "s4_2" + "s4_7" + "s4_8" + "s4_5" + "s4_6" + "s4_10" + "s4_9") <= ("Cstart_1" + "Cstart_0" + "Cstart_9" + "Cstart_8" + "Cstart_7" + "Cstart_6" + "Cstart_5" + "Cstart_4" + "Cstart_3" + "Cstart_2" + "Cstart_10")) or (("s6_1" + "s6_0" + "s6_3" + "s6_2" + "s6_5" + "s6_4" + "s6_7" + "s6_6" + "s6_9" + "s6_8" + "s6_10") <= ("s6_1" + "s6_0" + "s6_3" + "s6_2" + "s6_5" + "s6_4" + "s6_7" + "s6_6" + "s6_9" + "s6_8" + "s6_10"))) or not((("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10") <= ("n2_8" + "n2_7" + "n2_10" + "n2_9" + "n2_4" + "n2_3" + "n2_6" + "n2_5" + "n2_0" + "n2_2" + "n2_1")))) or (((2 <= ("s2_2" + "s2_1" + "s2_0" + "s2_7" + "s2_8" + "s2_9" + "s2_10" + "s2_3" + "s2_4" + "s2_5" + "s2_6")) and (2 <= ("n6_4" + "n6_3" + "n6_6" + "n6_5" + "n6_0" + "n6_2" + "n6_1" + "n6_8" + "n6_7" + "n6_10" + "n6_9"))) or ((("s3_1" + "s3_0" + "s3_5" + "s3_4" + "s3_3" + "s3_2" + "s3_9" + "s3_8" + "s3_7" + "s3_6" + "s3_10") <= ("n8_9_1" + "n8_8_1" + "n8_0_2" + "n8_10_1" + "n8_5_1" + "n8_4_1" + "n8_7_1" + "n8_6_1" + "n8_6_2" + "n8_5_2" + "n8_8_2" + "n8_7_2" + "n8_2_2" + "n8_1_2" + "n8_4_2" + "n8_3_2" + "n8_3_0" + "n8_4_0" + "n8_5_0" + "n8_6_0" + "n8_0_0" + "n8_1_0" + "n8_2_0" + "n8_0_1" + "n8_1_1" + "n8_2_1" + "n8_3_1" + "n8_7_0" + "n8_8_0" + "n8_9_0" + "n8_10_0" + "n8_2_5" + "n8_3_5" + "n8_0_5" + "n8_1_5" + "n8_6_5" + "n8_7_5" + "n8_4_5" + "n8_5_5" + "n8_5_4" + "n8_6_4" + "n8_3_4" + "n8_4_4" + "n8_9_4" + "n8_10_4" + "n8_7_4" + "n8_8_4" + "n8_9_3" + "n8_8_3" + "n8_7_3" + "n8_6_3" + "n8_2_4" + "n8_1_4" + "n8_0_4" + "n8_10_3" + "n8_1_3" + "n8_0_3" + "n8_10_2" + "n8_9_2" + "n8_5_3" + "n8_4_3" + "n8_3_3" + "n8_2_3" + "n8_10_7" + "n8_0_8" + "n8_1_8" + "n8_2_8" + "n8_3_8" + "n8_4_8" + "n8_5_8" + "n8_6_8" + "n8_2_7" + "n8_3_7" + "n8_4_7" + "n8_5_7" + "n8_6_7" + "n8_7_7" + "n8_8_7" + "n8_9_7" + "n8_6_6" + "n8_5_6" + "n8_8_6" + "n8_7_6" + "n8_10_6" + "n8_9_6" + "n8_1_7" + "n8_0_7" + "n8_9_5" + "n8_8_5" + "n8_0_6" + "n8_10_5" + "n8_2_6" + "n8_1_6" + "n8_4_6" + "n8_3_6" + "n8_9_10" + "n8_10_10" + "n8_7_10" + "n8_8_10" + "n8_5_10" + "n8_6_10" + "n8_3_10" + "n8_4_10" + "n8_1_10" + "n8_2_10" + "n8_0_10" + "n8_10_9" + "n8_9_9" + "n8_8_9" + "n8_7_9" + "n8_6_9" + "n8_5_9" + "n8_4_9" + "n8_3_9" + "n8_2_9" + "n8_1_9" + "n8_0_9" + "n8_10_8" + "n8_9_8" + "n8_8_8" + "n8_7_8")) and (3 <= ("n5_0" + "n5_1" + "n5_6" + "n5_7" + "n5_8" + "n5_9" + "n5_2" + "n5_3" + "n5_4" + "n5_5" + "n5_10"))))) )

BK_TIME_CONFINEMENT_REACHED

--------------------
content from stderr:

terminate called after throwing an instance of 'std::bad_alloc'
what(): std::bad_alloc
/home/mcc/BenchKit/tapaal.sh: line 42: 461 Aborted timeout $1 $VERIFYPN $3 "-x" $QUERY model.pnml $4
terminate called after throwing an instance of 'std::bad_alloc'
what(): std::bad_alloc
/home/mcc/BenchKit/tapaal.sh: line 42: 476 Aborted timeout $1 $VERIFYPN $3 "-x" $QUERY model.pnml $4

Sequence of Actions to be Executed by the VM

This is useful if one wants to reexecute the tool in the VM from the submitted image disk.

set -x
# this is for BenchKit: configuration of major elements for the test
export BK_INPUT="S_QuasiCertifProtocol-PT-10"
export BK_EXAMINATION="ReachabilityCardinality"
export BK_TOOL="tapaalSEQ"
export BK_RESULT_DIR="/root/BK_RESULTS/OUTPUTS"
export BK_TIME_CONFINEMENT="3600"
export BK_MEMORY_CONFINEMENT="16384"

# this is specific to your benchmark or test

export BIN_DIR="$HOME/BenchKit/bin"

# remove the execution directoty if it exists (to avoid increse of .vmdk images)
if [ -d execution ] ; then
rm -rf execution
fi

tar xzf /home/mcc/BenchKit/INPUTS/S_QuasiCertifProtocol-PT-10.tgz
mv S_QuasiCertifProtocol-PT-10 execution

# this is for BenchKit: explicit launching of the test

cd execution
echo "====================================================================="
echo " Generated by BenchKit 2-2979"
echo " Executing tool tapaalSEQ"
echo " Input is S_QuasiCertifProtocol-PT-10, examination is ReachabilityCardinality"
echo " Time confinement is $BK_TIME_CONFINEMENT seconds"
echo " Memory confinement is 16384 MBytes"
echo " Number of cores is 1"
echo " Run identifier is r186kn-smll-146444131800097"
echo "====================================================================="
echo
echo "--------------------"
echo "content from stdout:"
echo
echo "=== Data for post analysis generated by BenchKit (invocation template)"
echo
if [ "ReachabilityCardinality" = "UpperBounds" ] ; then
echo "The expected result is a vector of positive values"
echo NUM_VECTOR
elif [ "ReachabilityCardinality" != "StateSpace" ] ; then
echo "The expected result is a vector of booleans"
echo BOOL_VECTOR
else
echo "no data necessary for post analysis"
fi
echo
if [ -f "ReachabilityCardinality.txt" ] ; then
echo "here is the order used to build the result vector(from text file)"
for x in $(grep Property ReachabilityCardinality.txt | cut -d ' ' -f 2 | sort -u) ; do
echo "FORMULA_NAME $x"
done
elif [ -f "ReachabilityCardinality.xml" ] ; then # for cunf (txt files deleted;-)
echo echo "here is the order used to build the result vector(from xml file)"
for x in $(grep '' ReachabilityCardinality.xml | cut -d '>' -f 2 | cut -d '<' -f 1 | sort -u) ; do
echo "FORMULA_NAME $x"
done
fi
echo
echo "=== Now, execution of the tool begins"
echo
echo -n "BK_START "
date -u +%s%3N
echo
timeout -s 9 $BK_TIME_CONFINEMENT bash -c "/home/mcc/BenchKit/BenchKit_head.sh 2> STDERR ; echo ; echo -n \"BK_STOP \" ; date -u +%s%3N"
if [ $? -eq 137 ] ; then
echo
echo "BK_TIME_CONFINEMENT_REACHED"
fi
echo
echo "--------------------"
echo "content from stderr:"
echo
cat STDERR ;