fond
Model Checking Contest @ Petri Nets 2016
6th edition, Toruń, Poland, June 21, 2016
Execution of r181kn-smll-146444110200013
Last Updated
June 30, 2016

About the Execution of ITS-Tools for S_QuasiCertifProtocol-COL-02

Execution Summary
Max Memory
Used (MB)
Time wait (ms) CPU Usage (ms) I/O Wait (ms) Computed Result Execution
Status
359.090 5823.00 12164.00 254.00 TFFFFFFTFTFFFTFF normal

Execution Chart

We display below the execution chart for this examination (boot time has been removed).

Trace from the execution

Waiting for the VM to be ready (probing ssh)
..............
=====================================================================
Generated by BenchKit 2-2979
Executing tool itstools
Input is S_QuasiCertifProtocol-COL-02, examination is CTLFireability
Time confinement is 3600 seconds
Memory confinement is 16384 MBytes
Number of cores is 4
Run identifier is r181kn-smll-146444110200013
=====================================================================


--------------------
content from stdout:

=== Data for post analysis generated by BenchKit (invocation template)

The expected result is a vector of booleans
BOOL_VECTOR

here is the order used to build the result vector(from text file)
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-0
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-1
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-10
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-11
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-12
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-13
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-14
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-15
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-2
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-3
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-4
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-5
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-6
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-7
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-8
FORMULA_NAME QuasiCertifProtocol-COL-02-CTLFireability-9

=== Now, execution of the tool begins

BK_START 1464443583967


its-ctl command run as :

/home/mcc/BenchKit/eclipse/plugins/fr.lip6.move.gal.itstools.binaries_1.0.0.201605191313/bin/its-ctl-linux64 --gc-threshold 2000000 --quiet -i /home/mcc/execution/CTLFireability.gal -t CGAL -ctl /home/mcc/execution/CTLFireability.ctl
No direction supplied, using forward translation only.
Parsed 16 CTL formulae.
Model ,|S| ,Time ,Mem(kb) ,fin. SDD ,fin. DDD ,peak SDD ,peak DDD ,SDD Hom ,SDD cache peak ,DDD Hom ,DDD cachepeak ,SHom cache
reachable,1029,0.055473,5772,793,200,3586,677,199,1681,87,2234,0


Converting to forward existential form...Done !
original formula: AX(EG(!(((((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1) * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1))))))
=> equivalent forward existential formula: [(EY(Init) * !(EG(!(((((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1) * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))))))] = FALSE
Checking (exact) 0 :[(EY(Init) * !(EG(!(((((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1) * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))))))] = FALSE
Checking (exact) 0 :(EY(Init) * !(EG(!(((((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1) * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))))))
Checking (exact) 1 :!(EG(!(((((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1) * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1))))))
Checking (exact) 1 :EG(!(((((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1) * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))))
Fast SCC detection found none.
(forward)formula 0,1,0.287901,13440,1,0,18913,3547,1042,17092,450,18758,55717
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-0 TRUE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is TRUE !

***************************************

original formula: ((EF((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1))) * !(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + AF((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))) * E(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) * a2.a2[0]>=1)) U AF(a4.a4[0]>=1)))
=> equivalent forward existential formula: [(FwdU((Init * (E(TRUE U (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1))) * !(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))),((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) * a2.a2[0]>=1))) * !(EG(!(a4.a4[0]>=1))))] != FALSE
Checking (exact) 0 :[(FwdU((Init * (E(TRUE U (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1))) * !(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))),((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) * a2.a2[0]>=1))) * !(EG(!(a4.a4[0]>=1))))] != FALSE
Checking (exact) 0 :(FwdU((Init * (E(TRUE U (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1))) * !(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))),((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) * a2.a2[0]>=1))) * !(EG(!(a4.a4[0]>=1))))
Checking (exact) 1 :!(EG(!(a4.a4[0]>=1)))
Checking (exact) 1 :EG(!(a4.a4[0]>=1))
Checking (exact) 1 :FwdU((Init * (E(TRUE U (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1))) * !(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))),((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) * a2.a2[0]>=1)))
Checking (exact) 1 :(Init * (E(TRUE U (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1))) * !(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))))))
Checking (exact) 1 :(E(TRUE U (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1))) * !(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))
Checking (exact) 1 :!(((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))))
Checking (exact) 1 :((!(a4.a4[0]>=1) * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + a5.a5[0]>=1)) + !(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))
Checking (exact) 1 :!(EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))
Checking (exact) 1 :EG(!((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))
Checking (exact) 1 :E(TRUE U (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)))
Checking (exact) 1 :Init
(forward)formula 1,0,0.341288,15504,1,0,22918,3821,1158,21636,451,21032,66210
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-1 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: (EF((AG((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) * (((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))) + (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))
=> equivalent forward existential formula: ([((FwdU(Init,TRUE) * (((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))))] != FALSE + [(Init * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))] != FALSE)
Checking (exact) 0 :([((FwdU(Init,TRUE) * (((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))))] != FALSE + [(Init * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))] != FALSE)
Checking (exact) 0 :[((FwdU(Init,TRUE) * (((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))))] != FALSE
Checking (exact) 0 :((FwdU(Init,TRUE) * (((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))))
Checking (exact) 1 :!(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))
Checking (exact) 1 :E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))
Checking (exact) 0 :[(Init * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))] != FALSE
Checking (exact) 0 :(Init * (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1)))
(forward)formula 2,0,0.350869,15576,1,0,23058,3821,1199,21816,451,21032,67931
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-2 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: EG(!(((((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + a2.a2[0]>=1) * a2.a2[0]>=1) * (((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)) * (((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1)) * (((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1) * (((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1))))))
=> equivalent forward existential formula: [FwdG(Init,!(((((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + a2.a2[0]>=1) * a2.a2[0]>=1) * (((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)) * (((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1)) * (((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1) * (((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1))))))] != FALSE
Checking (exact) 0 :[FwdG(Init,!(((((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + a2.a2[0]>=1) * a2.a2[0]>=1) * (((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)) * (((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1)) * (((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1) * (((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1))))))] != FALSE
Checking (exact) 0 :FwdG(Init,!(((((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + a2.a2[0]>=1) * a2.a2[0]>=1) * (((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)) * (((a5.a5[0]>=1 * tsid2.n6_2>=1) * tsid0.n6_0>=1) * tsid1.n6_1>=1)) * (((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1) * (((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1))))))
Checking (exact) 1 :Init
(forward)formula 3,1,0.374667,15996,1,0,23120,3821,1344,22115,465,21090,71617
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-3 TRUE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is TRUE !

***************************************

original formula: AF(AG(((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + ((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + (((tsid0.n4_0>=1 * tsid2.n4_2>=1) * tsid1.n4_1>=1) * a3.a3[0]>=1)))))
=> equivalent forward existential formula: [FwdG(Init,!(!(E(TRUE U !(((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + ((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + (((tsid0.n4_0>=1 * tsid2.n4_2>=1) * tsid1.n4_1>=1) * a3.a3[0]>=1))))))))] = FALSE
Checking (exact) 0 :[FwdG(Init,!(!(E(TRUE U !(((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + ((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + (((tsid0.n4_0>=1 * tsid2.n4_2>=1) * tsid1.n4_1>=1) * a3.a3[0]>=1))))))))] = FALSE
Checking (exact) 0 :FwdG(Init,!(!(E(TRUE U !(((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + ((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + (((tsid0.n4_0>=1 * tsid2.n4_2>=1) * tsid1.n4_1>=1) * a3.a3[0]>=1))))))))
Checking (exact) 1 :Init
Checking (exact) 1 :!(!(E(TRUE U !(((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + ((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + (((tsid0.n4_0>=1 * tsid2.n4_2>=1) * tsid1.n4_1>=1) * a3.a3[0]>=1)))))))
Checking (exact) 1 :E(TRUE U !(((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + ((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)) + (((tsid0.n4_0>=1 * tsid2.n4_2>=1) * tsid1.n4_1>=1) * a3.a3[0]>=1)))))
(forward)formula 4,0,0.386044,16256,1,0,23291,3869,1373,22318,465,21113,72587
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-4 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: (A(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1)))) U (((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) + AF((EG((((tsid0.s4_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s4_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s4_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * AX((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))))
=> equivalent forward existential formula: [FwdG((Init * !(!((E(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) U (!(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))))) * !((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))) + EG(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)))))))),!((EG((((tsid0.s4_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s4_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s4_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(EX(!((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))))))] = FALSE
Checking (exact) 0 :[FwdG((Init * !(!((E(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) U (!(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))))) * !((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))) + EG(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)))))))),!((EG((((tsid0.s4_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s4_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s4_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(EX(!((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))))))] = FALSE
Checking (exact) 0 :FwdG((Init * !(!((E(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) U (!(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))))) * !((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))) + EG(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)))))))),!((EG((((tsid0.s4_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s4_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s4_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(EX(!((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))))))
Checking (exact) 1 :(Init * !(!((E(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) U (!(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))))) * !((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))) + EG(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))))))
Checking (exact) 1 :!(!((E(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) U (!(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))))) * !((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))) + EG(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)))))))
Checking (exact) 1 :(E(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) U (!(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))))) * !((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))) + EG(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)))))
Checking (exact) 1 :E(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))) U (!(!(((((tsid0.s5_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s5_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s5_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) * (((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))))) * !((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1)))))
Checking (exact) 1 :EG(!((((tsid0.n3_0>=1 * tsid0.s2_0>=1) + (tsid1.n3_1>=1 * tsid1.s2_1>=1)) + (tsid2.n3_2>=1 * tsid2.s2_2>=1))))
Checking (exact) 1 :Init
Checking (exact) 1 :!((EG((((tsid0.s4_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s4_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s4_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(EX(!((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))))))
Checking (exact) 1 :(EG((((tsid0.s4_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s4_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s4_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))) * !(EX(!((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))))
Checking (exact) 1 :!(EX(!((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))))
Checking (exact) 1 :EX(!((((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))
Checking (exact) 1 :EG((((tsid0.s4_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s4_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s4_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))
(forward)formula 5,0,0.462865,18144,1,0,28058,3869,1426,27042,466,21384,83379
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-5 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: AF(AG(AF(a1.a1[0]>=1)))
=> equivalent forward existential formula: [FwdG(Init,!(!(E(TRUE U !(!(EG(!(a1.a1[0]>=1))))))))] = FALSE
Checking (exact) 0 :[FwdG(Init,!(!(E(TRUE U !(!(EG(!(a1.a1[0]>=1))))))))] = FALSE
Checking (exact) 0 :FwdG(Init,!(!(E(TRUE U !(!(EG(!(a1.a1[0]>=1))))))))
Checking (exact) 1 :Init
Checking (exact) 1 :!(!(E(TRUE U !(!(EG(!(a1.a1[0]>=1)))))))
Checking (exact) 1 :E(TRUE U !(!(EG(!(a1.a1[0]>=1)))))
Checking (exact) 1 :!(!(EG(!(a1.a1[0]>=1))))
Checking (exact) 1 :EG(!(a1.a1[0]>=1))
(forward)formula 6,0,0.466857,18188,1,0,28180,3928,1447,27251,466,21549,84116
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-6 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: ((!((AF(a5.a5[0]>=1) + EX(a3.a3[0]>=1))) + A((a1.a1[0]>=1 + ((tsid0.s6_0>=1 + tsid1.s6_1>=1) + tsid2.s6_2>=1)) U ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))) + A(AG(a2.a2[0]>=1) U ((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1)))
=> equivalent forward existential formula: (([FwdG((Init * !(EX(a3.a3[0]>=1))),!(a5.a5[0]>=1))] != FALSE + [((Init * !(EG(!(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))) * !(E(!(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))) U (!((a1.a1[0]>=1 + ((tsid0.s6_0>=1 + tsid1.s6_1>=1) + tsid2.s6_2>=1))) * !(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))] != FALSE) + [((Init * !(EG(!(((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1))))) * !(E(!(((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1)) U (!(!(E(TRUE U !(a2.a2[0]>=1)))) * !(((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1))))))] != FALSE)
Checking (exact) 0 :(([FwdG((Init * !(EX(a3.a3[0]>=1))),!(a5.a5[0]>=1))] != FALSE + [((Init * !(EG(!(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))) * !(E(!(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))) U (!((a1.a1[0]>=1 + ((tsid0.s6_0>=1 + tsid1.s6_1>=1) + tsid2.s6_2>=1))) * !(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))] != FALSE) + [((Init * !(EG(!(((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1))))) * !(E(!(((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1)) U (!(!(E(TRUE U !(a2.a2[0]>=1)))) * !(((tsid0.s4_0>=1 + tsid1.s4_1>=1) + tsid2.s4_2>=1))))))] != FALSE)
Checking (exact) 0 :([FwdG((Init * !(EX(a3.a3[0]>=1))),!(a5.a5[0]>=1))] != FALSE + [((Init * !(EG(!(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))) * !(E(!(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))) U (!((a1.a1[0]>=1 + ((tsid0.s6_0>=1 + tsid1.s6_1>=1) + tsid2.s6_2>=1))) * !(((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.c1_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.c1_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.c1_2>=1)) + (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))))))] != FALSE)
Checking (exact) 0 :[FwdG((Init * !(EX(a3.a3[0]>=1))),!(a5.a5[0]>=1))] != FALSE
Checking (exact) 0 :FwdG((Init * !(EX(a3.a3[0]>=1))),!(a5.a5[0]>=1))
Checking (exact) 1 :(Init * !(EX(a3.a3[0]>=1)))
Checking (exact) 1 :!(EX(a3.a3[0]>=1))
Checking (exact) 1 :EX(a3.a3[0]>=1)
Checking (exact) 1 :Init
(forward)formula 7,1,0.468859,18232,1,0,28310,3928,1470,27375,466,21549,84525
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-7 TRUE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is TRUE !

***************************************

original formula: A((EG(a5.a5[0]>=1) * EF(a5.a5[0]>=1)) U AF((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))
=> equivalent forward existential formula: [((Init * !(EG(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))) * !(E(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))) U (!((EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1))) * !(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))))] != FALSE
Checking (exact) 0 :[((Init * !(EG(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))) * !(E(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))) U (!((EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1))) * !(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))))] != FALSE
Checking (exact) 0 :((Init * !(EG(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))) * !(E(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))) U (!((EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1))) * !(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))))
Checking (exact) 1 :!(E(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))) U (!((EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1))) * !(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))))))
Checking (exact) 1 :E(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))) U (!((EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1))) * !(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))
Checking (exact) 1 :!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))
Checking (exact) 1 :EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))
Checking (exact) 1 :(!((EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1))) * !(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))))
Checking (exact) 1 :!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))
Checking (exact) 1 :EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))
Checking (exact) 1 :!((EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1)))
Checking (exact) 1 :(EG(a5.a5[0]>=1) * E(TRUE U a5.a5[0]>=1))
Checking (exact) 1 :E(TRUE U a5.a5[0]>=1)
Checking (exact) 1 :EG(a5.a5[0]>=1)
Checking (exact) 1 :(Init * !(EG(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))))))
Checking (exact) 1 :!(EG(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))))
Checking (exact) 1 :EG(!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))))
Checking (exact) 1 :!(!(EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))))
Checking (exact) 1 :EG(!((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))
Checking (exact) 1 :Init
(forward)formula 8,0,0.496735,19340,1,0,30714,3961,1486,30742,466,21666,88151
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-8 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: EF(AF(AG((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))
=> equivalent forward existential formula: [(FwdU(Init,TRUE) * !(EG(!(!(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))))))] != FALSE
Checking (exact) 0 :[(FwdU(Init,TRUE) * !(EG(!(!(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))))))] != FALSE
Checking (exact) 0 :(FwdU(Init,TRUE) * !(EG(!(!(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))))))
Checking (exact) 1 :!(EG(!(!(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))))))
Checking (exact) 1 :EG(!(!(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))))
Checking (exact) 1 :!(!(E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))))
Checking (exact) 1 :E(TRUE U !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))
(forward)formula 9,0,0.500494,19340,1,0,30714,3961,1486,30742,466,21666,88151
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-9 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: AF((A((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1)) U (((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) * (((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))
=> equivalent forward existential formula: [FwdG(Init,!((!((E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))) + EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))) * (((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))))] = FALSE
Checking (exact) 0 :[FwdG(Init,!((!((E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))) + EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))) * (((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))))] = FALSE
Checking (exact) 0 :FwdG(Init,!((!((E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))) + EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))) * (((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))))
Checking (exact) 1 :Init
Checking (exact) 1 :!((!((E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))) + EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))) * (((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))
Checking (exact) 1 :(!((E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))) + EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))) * (((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))
Checking (exact) 1 :(((tsid0.Sstart_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.Sstart_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.Sstart_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))
Checking (exact) 1 :!((E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))) + EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))))
Checking (exact) 1 :(E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))) + EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))
Checking (exact) 1 :E(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))) U (!((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1))) * !((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)))))
Checking (exact) 1 :EG(!((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1))))
(forward)formula 10,0,0.540219,20084,1,0,32491,4033,1531,32786,466,21826,94595
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-10 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: ((EF(!(((((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1) + (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1))))) * !(((!(Astart.Astart[0]>=1) + (((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1)) * (!((((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))) + ((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1)) * a2.a2[0]>=1))))) * AX(EF(((((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + a2.a2[0]>=1))))
=> equivalent forward existential formula: (([(Init * !(E(TRUE U !(((((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1) + (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))))] = FALSE * [(Init * ((!(Astart.Astart[0]>=1) + (((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1)) * (!((((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))) + ((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1)) * a2.a2[0]>=1))))] = FALSE) * [(EY(Init) * !(E(TRUE U ((((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + a2.a2[0]>=1))))] = FALSE)
Checking (exact) 0 :(([(Init * !(E(TRUE U !(((((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1) + (((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)))))))] = FALSE * [(Init * ((!(Astart.Astart[0]>=1) + (((a1.a1[0]>=1 * tsid0.n2_0>=1) * tsid2.n2_2>=1) * tsid1.n2_1>=1)) * (!((((tsid0.n5_0>=1 * tsid0.s3_0>=1) + (tsid1.n5_1>=1 * tsid1.s3_1>=1)) + (tsid2.n5_2>=1 * tsid2.s3_2>=1))) + ((((((tsidxtsid0.n9_0>=1 * tsidxtsid6.n9_6>=1) * tsidxtsid3.n9_3>=1) * tsid0.c1_0>=1) + (((tsidxtsid1.n9_1>=1 * tsidxtsid7.n9_7>=1) * tsidxtsid4.n9_4>=1) * tsid1.c1_1>=1)) + (((tsidxtsid2.n9_2>=1 * tsidxtsid8.n9_8>=1) * tsidxtsid5.n9_5>=1) * tsid2.c1_2>=1)) * a2.a2[0]>=1))))] = FALSE) * [(EY(Init) * !(E(TRUE U ((((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + a2.a2[0]>=1))))] = FALSE)
Checking (exact) 1 :[(EY(Init) * !(E(TRUE U ((((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + a2.a2[0]>=1))))] = FALSE
Checking (exact) 0 :(EY(Init) * !(E(TRUE U ((((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + a2.a2[0]>=1))))
Checking (exact) 1 :!(E(TRUE U ((((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + a2.a2[0]>=1)))
Checking (exact) 1 :E(TRUE U ((((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + a2.a2[0]>=1))
Checking (exact) 1 :EY(Init)
Checking (exact) 1 :Init
(forward)formula 11,0,0.54421,20344,1,0,32605,4047,1544,32906,466,21889,95092
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-11 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: EX(E(!(a2.a2[0]>=1) U ((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)) * (((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1)))))
=> equivalent forward existential formula: [(FwdU(EY(Init),!(a2.a2[0]>=1)) * ((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)) * (((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))] != FALSE
Checking (exact) 0 :[(FwdU(EY(Init),!(a2.a2[0]>=1)) * ((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)) * (((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))] != FALSE
Checking (exact) 0 :(FwdU(EY(Init),!(a2.a2[0]>=1)) * ((((((tsid0.Cstart_0>=1 * tsidxtsid6.n7_6>=1) * tsidxtsid3.n7_3>=1) * tsidxtsid0.n7_0>=1) + (((tsid1.Cstart_1>=1 * tsidxtsid7.n7_7>=1) * tsidxtsid4.n7_4>=1) * tsidxtsid1.n7_1>=1)) + (((tsid2.Cstart_2>=1 * tsidxtsid8.n7_8>=1) * tsidxtsid5.n7_5>=1) * tsidxtsid2.n7_2>=1)) * (((tsid0.s2_0>=1 * malicious_reservoir.malicious_reservoir[0]>=1) + (tsid1.s2_1>=1 * malicious_reservoir.malicious_reservoir[0]>=1)) + (tsid2.s2_2>=1 * malicious_reservoir.malicious_reservoir[0]>=1))))
(forward)formula 12,0,0.545806,20348,1,0,32626,4047,1546,32906,466,21889,95093
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-12 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: EG(EX(EF((((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))
=> equivalent forward existential formula: [FwdG(Init,EX(E(TRUE U (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))] != FALSE
Checking (exact) 0 :[FwdG(Init,EX(E(TRUE U (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))] != FALSE
Checking (exact) 0 :FwdG(Init,EX(E(TRUE U (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))))
Checking (exact) 1 :Init
Checking (exact) 1 :EX(E(TRUE U (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1))))
Checking (exact) 1 :E(TRUE U (((((tsid0.s5_0>=1 * tsidxtsid0.n8_0>=1) * tsidxtsid2.n8_2>=1) * tsidxtsid1.n8_1>=1) + (((tsid1.s5_1>=1 * tsidxtsid3.n8_3>=1) * tsidxtsid5.n8_5>=1) * tsidxtsid4.n8_4>=1)) + (((tsid2.s5_2>=1 * tsidxtsid6.n8_6>=1) * tsidxtsid8.n8_8>=1) * tsidxtsid7.n8_7>=1)))
dead was empty
(forward)formula 13,0,0.56067,20408,1,0,33396,4048,1546,33813,466,21906,97598
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-13 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: AG(AF((a2.a2[0]>=1 * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1))))))
=> equivalent forward existential formula: [FwdG(FwdU(Init,TRUE),!((a2.a2[0]>=1 * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1))))))] = FALSE
Checking (exact) 0 :[FwdG(FwdU(Init,TRUE),!((a2.a2[0]>=1 * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1))))))] = FALSE
Checking (exact) 0 :FwdG(FwdU(Init,TRUE),!((a2.a2[0]>=1 * ((((malicious_reservoir.malicious_reservoir[0]>=1 * tsid0.s6_0>=1) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid1.s6_1>=1)) + (malicious_reservoir.malicious_reservoir[0]>=1 * tsid2.s6_2>=1)) + (((tsid0.n1_0>=1 * tsid0.Sstart_0>=1) + (tsid1.n1_1>=1 * tsid1.Sstart_1>=1)) + (tsid2.n1_2>=1 * tsid2.Sstart_2>=1))))))
Checking (exact) 1 :FwdU(Init,TRUE)
Checking (exact) 1 :Init
(forward)formula 14,0,0.563489,20808,1,0,33433,4048,1550,33828,466,21906,97931
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-14 FALSE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is FALSE !

***************************************

original formula: EG(!(a2.a2[0]>=1))
=> equivalent forward existential formula: [FwdG(Init,!(a2.a2[0]>=1))] != FALSE
Checking (exact) 0 :[FwdG(Init,!(a2.a2[0]>=1))] != FALSE
Checking (exact) 0 :FwdG(Init,!(a2.a2[0]>=1))
Checking (exact) 1 :Init
(forward)formula 15,1,0.565248,20808,1,0,33500,4048,1580,33896,466,21906,98332
FORMULA QuasiCertifProtocol-COL-02-CTLFireability-15 TRUE TECHNIQUES DECISION_DIAGRAMS TOPOLOGICAL USE_NUPN
Formula is TRUE !

***************************************


BK_STOP 1464443589790

--------------------
content from stderr:

+ export BINDIR=/home/mcc/BenchKit/
+ BINDIR=/home/mcc/BenchKit/
++ pwd
+ export MODEL=/home/mcc/execution
+ MODEL=/home/mcc/execution
+ [[ CTLFireability = StateSpace ]]
+ /home/mcc/BenchKit//runeclipse.sh /home/mcc/execution CTLFireability -its
+ ulimit -s 65536
+ java -Dosgi.requiredJavaVersion=1.6 -XX:MaxPermSize=512m -Xss8m -Xms40m -Xmx8192m -Declipse.pde.launch=true -Dfile.encoding=UTF-8 -classpath /home/mcc/BenchKit//eclipse/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar org.eclipse.equinox.launcher.Main -application fr.lip6.move.gal.application.pnmcc -data /home/mcc/BenchKit//workspace -os linux -ws gtk -arch x86_64 -nl en_US -consoleLog -pnfolder /home/mcc/execution -examination CTLFireability -z3path /home/mcc/BenchKit//z3/bin/z3 -yices2path /home/mcc/BenchKit//yices/bin/yices -its
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512m; support was removed in 8.0
May 28, 2016 1:53:06 PM fr.lip6.move.gal.application.Application transformPNML
INFO: Parsing pnml file : /home/mcc/execution/model.pnml
May 28, 2016 1:53:06 PM fr.lip6.move.gal.pnml.togal.PnmlToGalTransformer transform
INFO: Detected file is not PT type :http://www.pnml.org/version-2009/grammar/symmetricnet
May 28, 2016 1:53:08 PM fr.lip6.move.gal.pnml.togal.PnmlToGalTransformer transform
INFO: Load time of PNML (colored model parsed with PNMLFW) : 1176 ms
May 28, 2016 1:53:08 PM fr.lip6.move.gal.pnml.togal.HLGALTransformer handlePage
INFO: Transformed 30 places.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.pnml.togal.HLGALTransformer handlePage
INFO: read order :VarOrder [vars=[malicious_reservoir[0], CstopAbort[0], SstopAbort[0], AstopAbort[0], n9[0], n9[1], n9[2], n9[3], n9[4], n9[5], n9[6], n9[7], n9[8], n8[0], n8[1], n8[2], n8[3], n8[4], n8[5], n8[6], n8[7], n8[8], n7[0], n7[1], n7[2], n7[3], n7[4], n7[5], n7[6], n7[7], n7[8], n6[0], n6[1], n6[2], n5[0], n5[1], n5[2], n4[0], n4[1], n4[2], n3[0], n3[1], n3[2], n2[0], n2[1], n2[2], n1[0], n1[1], n1[2], c1[0], c1[1], c1[2], Cstart[0], Cstart[1], Cstart[2], Sstart[0], Sstart[1], Sstart[2], s2[0], s2[1], s2[2], s3[0], s3[1], s3[2], s4[0], s4[1], s4[2], s5[0], s5[1], s5[2], s6[0], s6[1], s6[2], SstopOK[0], SstopOK[1], SstopOK[2], a5[0], a4[0], a3[0], a2[0], a1[0], Astart[0], AstopOK[0], CstopOK[0], CstopOK[1], CstopOK[2]]]
May 28, 2016 1:53:08 PM fr.lip6.move.gal.pnml.togal.HLGALTransformer handlePage
INFO: sort/places :tsidxtsid->n9,n8,n7,
Dot->malicious_reservoir,CstopAbort,SstopAbort,AstopAbort,a5,a4,a3,a2,a1,Astart,AstopOK,
tsid->n6,n5,n4,n3,n2,n1,c1,Cstart,Sstart,s2,s3,s4,s5,s6,SstopOK,CstopOK,

May 28, 2016 1:53:08 PM fr.lip6.move.gal.pnml.togal.HLGALTransformer handlePage
INFO: Transformed 26 transitions.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.pnml.togal.PnmlToGalTransformer transform
INFO: Computed order based on color domains : CompositeGalOrder [children=[VarOrder [vars=[n9[0], n8[0], n7[0]]], VarOrder [vars=[n9[1], n8[1], n7[1]]], VarOrder [vars=[n9[2], n8[2], n7[2]]], VarOrder [vars=[n9[3], n8[3], n7[3]]], VarOrder [vars=[n9[4], n8[4], n7[4]]], VarOrder [vars=[n9[5], n8[5], n7[5]]], VarOrder [vars=[n9[6], n8[6], n7[6]]], VarOrder [vars=[n9[7], n8[7], n7[7]]], VarOrder [vars=[n9[8], n8[8], n7[8]]], VarOrder [vars=[malicious_reservoir[0]]], VarOrder [vars=[CstopAbort[0]]], VarOrder [vars=[SstopAbort[0]]], VarOrder [vars=[AstopAbort[0]]], VarOrder [vars=[a5[0]]], VarOrder [vars=[a4[0]]], VarOrder [vars=[a3[0]]], VarOrder [vars=[a2[0]]], VarOrder [vars=[a1[0]]], VarOrder [vars=[Astart[0]]], VarOrder [vars=[AstopOK[0]]], VarOrder [vars=[n6[0], n5[0], n4[0], n3[0], n2[0], n1[0], c1[0], Cstart[0], Sstart[0], s2[0], s3[0], s4[0], s5[0], s6[0], SstopOK[0], CstopOK[0]]], VarOrder [vars=[n6[1], n5[1], n4[1], n3[1], n2[1], n1[1], c1[1], Cstart[1], Sstart[1], s2[1], s3[1], s4[1], s5[1], s6[1], SstopOK[1], CstopOK[1]]], VarOrder [vars=[n6[2], n5[2], n4[2], n3[2], n2[2], n1[2], c1[2], Cstart[2], Sstart[2], s2[2], s3[2], s4[2], s5[2], s6[2], SstopOK[2], CstopOK[2]]]]]
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.GALRewriter flatten
INFO: Flatten gal took : 50 ms
May 28, 2016 1:53:08 PM fr.lip6.move.gal.application.Application applyOrder
INFO: Applying decomposition
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder decomposeWithOrder
INFO: Decomposing Gal with order
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.GALRewriter flatten
INFO: Flatten gal took : 25 ms
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder decomposeWithOrder
INFO: Partition obtained :[n9[0], n8[0], n7[0], ],[n9[1], n8[1], n7[1], ],[n9[2], n8[2], n7[2], ],[n9[3], n8[3], n7[3], ],[n9[4], n8[4], n7[4], ],[n9[5], n8[5], n7[5], ],[n9[6], n8[6], n7[6], ],[n9[7], n8[7], n7[7], ],[n9[8], n8[8], n7[8], ],[malicious_reservoir[0], ],[CstopAbort[0], ],[SstopAbort[0], ],[AstopAbort[0], ],[a5[0], ],[a4[0], ],[a3[0], ],[a2[0], ],[a1[0], ],[Astart[0], ],[AstopOK[0], ],[n6[0], n5[0], n4[0], n3[0], n2[0], n1[0], c1[0], Cstart[0], Sstart[0], s2[0], s3[0], s4[0], s5[0], s6[0], SstopOK[0], CstopOK[0], ],[n6[1], n5[1], n4[1], n3[1], n2[1], n1[1], c1[1], Cstart[1], Sstart[1], s2[1], s3[1], s4[1], s5[1], s6[1], SstopOK[1], CstopOK[1], ],[n6[2], n5[2], n4[2], n3[2], n2[2], n1[2], c1[2], Cstart[2], Sstart[2], s2[2], s3[2], s4[2], s5[2], s6[2], SstopOK[2], CstopOK[2], ],

May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n9 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n8 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n7 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n6 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n5 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n4 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n3 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n2 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array n1 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array c1 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array Cstart to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array Sstart to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array s2 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array s3 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array s4 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array s5 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array s6 to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array SstopOK to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.CompositeBuilder rewriteArraysToAllowPartition
INFO: Rewriting array CstopOK to variables to allow decomposition.
May 28, 2016 1:53:08 PM fr.lip6.move.gal.instantiate.Instantiator fuseIsomorphicEffects
INFO: Removed a total of 20 redundant transitions.
May 28, 2016 1:53:08 PM fr.lip6.move.serialization.SerializationUtil systemToFile
INFO: Time to serialize gal into /home/mcc/execution/CTLFireability.gal : 16 ms
May 28, 2016 1:53:08 PM fr.lip6.move.serialization.SerializationUtil serializePropertiesForITSCTLTools
INFO: Time to serialize properties into /home/mcc/execution/CTLFireability.ctl : 4 ms

Sequence of Actions to be Executed by the VM

This is useful if one wants to reexecute the tool in the VM from the submitted image disk.

set -x
# this is for BenchKit: configuration of major elements for the test
export BK_INPUT="S_QuasiCertifProtocol-COL-02"
export BK_EXAMINATION="CTLFireability"
export BK_TOOL="itstools"
export BK_RESULT_DIR="/root/BK_RESULTS/OUTPUTS"
export BK_TIME_CONFINEMENT="3600"
export BK_MEMORY_CONFINEMENT="16384"

# this is specific to your benchmark or test

export BIN_DIR="$HOME/BenchKit/bin"

# remove the execution directoty if it exists (to avoid increse of .vmdk images)
if [ -d execution ] ; then
rm -rf execution
fi

tar xzf /home/mcc/BenchKit/INPUTS/S_QuasiCertifProtocol-COL-02.tgz
mv S_QuasiCertifProtocol-COL-02 execution

# this is for BenchKit: explicit launching of the test

cd execution
echo "====================================================================="
echo " Generated by BenchKit 2-2979"
echo " Executing tool itstools"
echo " Input is S_QuasiCertifProtocol-COL-02, examination is CTLFireability"
echo " Time confinement is $BK_TIME_CONFINEMENT seconds"
echo " Memory confinement is 16384 MBytes"
echo " Number of cores is 4"
echo " Run identifier is r181kn-smll-146444110200013"
echo "====================================================================="
echo
echo "--------------------"
echo "content from stdout:"
echo
echo "=== Data for post analysis generated by BenchKit (invocation template)"
echo
if [ "CTLFireability" = "UpperBounds" ] ; then
echo "The expected result is a vector of positive values"
echo NUM_VECTOR
elif [ "CTLFireability" != "StateSpace" ] ; then
echo "The expected result is a vector of booleans"
echo BOOL_VECTOR
else
echo "no data necessary for post analysis"
fi
echo
if [ -f "CTLFireability.txt" ] ; then
echo "here is the order used to build the result vector(from text file)"
for x in $(grep Property CTLFireability.txt | cut -d ' ' -f 2 | sort -u) ; do
echo "FORMULA_NAME $x"
done
elif [ -f "CTLFireability.xml" ] ; then # for cunf (txt files deleted;-)
echo echo "here is the order used to build the result vector(from xml file)"
for x in $(grep '' CTLFireability.xml | cut -d '>' -f 2 | cut -d '<' -f 1 | sort -u) ; do
echo "FORMULA_NAME $x"
done
fi
echo
echo "=== Now, execution of the tool begins"
echo
echo -n "BK_START "
date -u +%s%3N
echo
timeout -s 9 $BK_TIME_CONFINEMENT bash -c "/home/mcc/BenchKit/BenchKit_head.sh 2> STDERR ; echo ; echo -n \"BK_STOP \" ; date -u +%s%3N"
if [ $? -eq 137 ] ; then
echo
echo "BK_TIME_CONFINEMENT_REACHED"
fi
echo
echo "--------------------"
echo "content from stderr:"
echo
cat STDERR ;