Execution Chart

We display below the execution chart for this examination (boot time has been removed).

Trace from the execution

Formatting '/data/fkordon/mcc2023-input.r289-tall-167873940900806.qcow2', fmt=qcow2 size=4294967296 backing_file=/data/fkordon/mcc2023-input.qcow2 cluster_size=65536 lazy_refcounts=off refcount_bits=16
Waiting for the VM to be ready (probing ssh)
..................
=====================================================================
Generated by BenchKit 2-5348
Executing tool marcie
Input is QuasiCertifProtocol-COL-02, examination is ReachabilityCardinality
Time confinement is 3600 seconds
Memory confinement is 16384 MBytes
Number of cores is 1
Run identifier is r289-tall-167873940900806
=====================================================================

--------------------
preparation of the directory to be used:
/home/mcc/execution
total 460K
-rw-r--r-- 1 mcc users 7.4K Feb 26 01:27 CTLCardinality.txt
-rw-r--r-- 1 mcc users 81K Feb 26 01:27 CTLCardinality.xml
-rw-r--r-- 1 mcc users 5.4K Feb 26 01:26 CTLFireability.txt
-rw-r--r-- 1 mcc users 46K Feb 26 01:26 CTLFireability.xml
-rw-r--r-- 1 mcc users 4.2K Jan 29 11:40 GenericPropertiesDefinition.xml
-rw-r--r-- 1 mcc users 6.8K Jan 29 11:40 GenericPropertiesVerdict.xml
-rw-r--r-- 1 mcc users 3.9K Feb 25 16:36 LTLCardinality.txt
-rw-r--r-- 1 mcc users 26K Feb 25 16:36 LTLCardinality.xml
-rw-r--r-- 1 mcc users 2.5K Feb 25 16:37 LTLFireability.txt
-rw-r--r-- 1 mcc users 19K Feb 25 16:37 LTLFireability.xml
-rw-r--r-- 1 mcc users 12K Feb 26 01:29 ReachabilityCardinality.txt
-rw-r--r-- 1 mcc users 115K Feb 26 01:29 ReachabilityCardinality.xml
-rw-r--r-- 1 mcc users 6.5K Feb 26 01:28 ReachabilityFireability.txt
-rw-r--r-- 1 mcc users 46K Feb 26 01:28 ReachabilityFireability.xml
-rw-r--r-- 1 mcc users 1.8K Feb 25 16:37 UpperBounds.txt
-rw-r--r-- 1 mcc users 3.8K Feb 25 16:37 UpperBounds.xml
-rw-r--r-- 1 mcc users 5 Mar 5 18:23 equiv_pt
-rw-r--r-- 1 mcc users 3 Mar 5 18:23 instance
-rw-r--r-- 1 mcc users 5 Mar 5 18:23 iscolored
-rw-r--r-- 1 mcc users 34K Mar 5 18:23 model.pnml

--------------------
content from stdout:

=== Data for post analysis generated by BenchKit (invocation template)

The expected result is a vector of booleans
BOOL_VECTOR

here is the order used to build the result vector(from text file)
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-00
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-01
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-02
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-03
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-04
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-05
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-06
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-07
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-08
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-09
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-10
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-11
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-12
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-13
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-14
FORMULA_NAME QuasiCertifProtocol-COL-02-ReachabilityCardinality-15

=== Now, execution of the tool begins

BK_START 1678821257378

bash -c /home/mcc/BenchKit/BenchKit_head.sh 2> STDERR ; echo ; echo -n "BK_STOP " ; date -u +%s%3N
Invoking MCC driver with
BK_TOOL=marcie
BK_EXAMINATION=ReachabilityCardinality
BK_BIN_PATH=/home/mcc/BenchKit/bin/
BK_TIME_CONFINEMENT=3600
BK_INPUT=QuasiCertifProtocol-COL-02
Not applying reductions.
Model is COL
ReachabilityCardinality COL
timeout --kill-after=10s --signal=SIGINT 1m for testing only

Marcie built on Linux at 2019-11-18.
A model checker for Generalized Stochastic Petri nets

authors: Alex Tovchigrechko (IDD package and CTL model checking)

Martin Schwarick (Symbolic numerical analysis and CSL model checking)

Christian Rohr (Simulative and approximative numerical model checking)

marcie@informatik.tu-cottbus.de

called as: /home/mcc/BenchKit/bin//../marcie/bin/marcie --net-file=model.pnml --mcc-file=ReachabilityCardinality.xml --memory=6 --mcc-mode

parse successfull
net created successfully

Unfolding complete |P|=86|T|=56|A|=223
Time for unfolding: 0m 2.016sec

Net: QuasiCertifProtocol_COL_02
(NrP: 86 NrTr: 56 NrArc: 223)

parse formulas
formulas created successfully
place and transition orderings generation:0m 0.000sec

net check time: 0m 0.000sec

init dd package: 0m 2.852sec


RS generation: 0m 0.020sec


-> reachability set: #nodes 1808 (1.8e+03) #states 1,029 (3)



starting MCC model checker
--------------------------

checking: EF [~ [Astart_dot<=85]]
normalized: E [true U ~ [Astart_dot<=85]]

abstracting: (Astart_dot<=85)
states: 1,029 (3)
-> the formula is FALSE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-07 FALSE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 0.001sec

checking: EF [7<=Astart_dot]
normalized: E [true U 7<=Astart_dot]

abstracting: (7<=Astart_dot)
states: 0
-> the formula is FALSE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-10 FALSE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 0.000sec

checking: EF [45<=sum(s6_tsid2, s6_tsid1, s6_tsid0)]
normalized: E [true U 45<=sum(s6_tsid2, s6_tsid1, s6_tsid0)]

abstracting: (45<=sum(s6_tsid2, s6_tsid1, s6_tsid0))
states: 0
-> the formula is FALSE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-11 FALSE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 0.021sec

checking: EF [sum(n6_tsid2, n6_tsid1, n6_tsid0)<=malicious_reservoir_dot]
normalized: E [true U sum(n6_tsid2, n6_tsid1, n6_tsid0)<=malicious_reservoir_dot]

abstracting: (sum(n6_tsid2, n6_tsid1, n6_tsid0)<=malicious_reservoir_dot)
states: 411
-> the formula is TRUE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-02 TRUE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 0.044sec

checking: AG [sum(s4_tsid2, s4_tsid1, s4_tsid0)<=AstopAbort_dot]
normalized: ~ [E [true U ~ [sum(s4_tsid2, s4_tsid1, s4_tsid0)<=AstopAbort_dot]]]

abstracting: (sum(s4_tsid2, s4_tsid1, s4_tsid0)<=AstopAbort_dot)
states: 924
-> the formula is FALSE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-09 FALSE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 0.034sec

checking: EF [sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)<=CstopAbort_dot]
normalized: E [true U sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)<=CstopAbort_dot]

abstracting: (sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)<=CstopAbort_dot)
states: 999
-> the formula is TRUE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-12 TRUE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 0.036sec

checking: AG [~ [Astart_dot<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)]]
normalized: ~ [E [true U Astart_dot<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)]]

abstracting: (Astart_dot<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0))
states: 1,029 (3)
-> the formula is FALSE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-15 FALSE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 0.025sec

checking: EF [~ [sum(n1_tsid2, n1_tsid1, n1_tsid0)<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)]]
normalized: E [true U ~ [sum(n1_tsid2, n1_tsid1, n1_tsid0)<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)]]

abstracting: (sum(n1_tsid2, n1_tsid1, n1_tsid0)<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0))
states: 973
-> the formula is TRUE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-00 TRUE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 0.048sec

checking: AG [[[sum(s3_tsid2, s3_tsid1, s3_tsid0)<=sum(n5_tsid2, n5_tsid1, n5_tsid0) & ~ [90<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)]] | ~ [[[62<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0) & [sum(n4_tsid2, n4_tsid1, n4_tsid0)<=sum(n6_tsid2, n6_tsid1, n6_tsid0) & [~ [[[72<=CstopAbort_dot | 34<=a4_dot] | sum(n6_tsid2, n6_tsid1, n6_tsid0)<=69]] & [Astart_dot<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0) | 12<=sum(c1_tsid2, c1_tsid1, c1_tsid0)]]]] | 96<=sum(s5_tsid2, s5_tsid1, s5_tsid0)]]]]
normalized: ~ [E [true U ~ [[~ [[[[[~ [[[72<=CstopAbort_dot | 34<=a4_dot] | sum(n6_tsid2, n6_tsid1, n6_tsid0)<=69]] & [Astart_dot<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0) | 12<=sum(c1_tsid2, c1_tsid1, c1_tsid0)]] & sum(n4_tsid2, n4_tsid1, n4_tsid0)<=sum(n6_tsid2, n6_tsid1, n6_tsid0)] & 62<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)] | 96<=sum(s5_tsid2, s5_tsid1, s5_tsid0)]] | [~ [90<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)] & sum(s3_tsid2, s3_tsid1, s3_tsid0)<=sum(n5_tsid2, n5_tsid1, n5_tsid0)]]]]]

abstracting: (sum(s3_tsid2, s3_tsid1, s3_tsid0)<=sum(n5_tsid2, n5_tsid1, n5_tsid0))
states: 971
abstracting: (90<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0))
states: 0
abstracting: (96<=sum(s5_tsid2, s5_tsid1, s5_tsid0))
states: 0
abstracting: (62<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0))
states: 0
abstracting: (sum(n4_tsid2, n4_tsid1, n4_tsid0)<=sum(n6_tsid2, n6_tsid1, n6_tsid0))
states: 973
abstracting: (12<=sum(c1_tsid2, c1_tsid1, c1_tsid0))
states: 0
abstracting: (Astart_dot<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0))
states: 1,025 (3)
abstracting: (sum(n6_tsid2, n6_tsid1, n6_tsid0)<=69)
states: 1,029 (3)
abstracting: (34<=a4_dot)
states: 0
abstracting: (72<=CstopAbort_dot)
states: 0
-> the formula is TRUE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-13 TRUE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 0.181sec

checking: AG [[~ [[[79<=sum(s4_tsid2, s4_tsid1, s4_tsid0) | sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0)<=98] | Astart_dot<=sum(s2_tsid2, s2_tsid1, s2_tsid0)]] & [[~ [[~ [[[AstopOK_dot<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0) | sum(s2_tsid2, s2_tsid1, s2_tsid0)<=8] & ~ [sum(n4_tsid2, n4_tsid1, n4_tsid0)<=76]]] & ~ [sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)<=Astart_dot]]] | CstopAbort_dot<=13] | AstopAbort_dot<=sum(n4_tsid2, n4_tsid1, n4_tsid0)]]]
normalized: ~ [E [true U ~ [[[[~ [[~ [sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)<=Astart_dot] & ~ [[~ [sum(n4_tsid2, n4_tsid1, n4_tsid0)<=76] & [AstopOK_dot<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0) | sum(s2_tsid2, s2_tsid1, s2_tsid0)<=8]]]]] | CstopAbort_dot<=13] | AstopAbort_dot<=sum(n4_tsid2, n4_tsid1, n4_tsid0)] & ~ [[[79<=sum(s4_tsid2, s4_tsid1, s4_tsid0) | sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0)<=98] | Astart_dot<=sum(s2_tsid2, s2_tsid1, s2_tsid0)]]]]]]

abstracting: (Astart_dot<=sum(s2_tsid2, s2_tsid1, s2_tsid0))
states: 1,025 (3)
abstracting: (sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0)<=98)
states: 1,029 (3)
abstracting: (79<=sum(s4_tsid2, s4_tsid1, s4_tsid0))
states: 0
abstracting: (AstopAbort_dot<=sum(n4_tsid2, n4_tsid1, n4_tsid0))
states: 666
abstracting: (CstopAbort_dot<=13)
states: 1,029 (3)
abstracting: (sum(s2_tsid2, s2_tsid1, s2_tsid0)<=8)
states: 1,029 (3)
abstracting: (AstopOK_dot<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0))
states: 937
abstracting: (sum(n4_tsid2, n4_tsid1, n4_tsid0)<=76)
states: 1,029 (3)
abstracting: (sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)<=Astart_dot)
states: 666
-> the formula is FALSE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-03 FALSE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 0.186sec

checking: EF [~ [[[~ [47<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0)] & 64<=Astart_dot] | [~ [[[~ [[[AstopAbort_dot<=92 & malicious_reservoir_dot<=sum(s4_tsid2, s4_tsid1, s4_tsid0)] | [a4_dot<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0) | Astart_dot<=AstopOK_dot]]] & sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=66] & ~ [[79<=a1_dot | [~ [sum(s5_tsid2, s5_tsid1, s5_tsid0)<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)] & [46<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0) & AstopOK_dot<=sum(n2_tsid2, n2_tsid1, n2_tsid0)]]]]]] & sum(Sstart_tsid2, Sstart_tsid1, Sstart_tsid0)<=98]]]]
normalized: E [true U ~ [[[~ [[~ [[[~ [sum(s5_tsid2, s5_tsid1, s5_tsid0)<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)] & [46<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0) & AstopOK_dot<=sum(n2_tsid2, n2_tsid1, n2_tsid0)]] | 79<=a1_dot]] & [~ [[[a4_dot<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0) | Astart_dot<=AstopOK_dot] | [AstopAbort_dot<=92 & malicious_reservoir_dot<=sum(s4_tsid2, s4_tsid1, s4_tsid0)]]] & sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=66]]] & sum(Sstart_tsid2, Sstart_tsid1, Sstart_tsid0)<=98] | [~ [47<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0)] & 64<=Astart_dot]]]]

abstracting: (64<=Astart_dot)
states: 0
abstracting: (47<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0))
states: 0
abstracting: (sum(Sstart_tsid2, Sstart_tsid1, Sstart_tsid0)<=98)
states: 1,029 (3)
abstracting: (sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=66)
states: 1,029 (3)
abstracting: (malicious_reservoir_dot<=sum(s4_tsid2, s4_tsid1, s4_tsid0))
states: 855
abstracting: (AstopAbort_dot<=92)
states: 1,029 (3)
abstracting: (Astart_dot<=AstopOK_dot)
states: 1,025 (3)
abstracting: (a4_dot<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0))
states: 1,025 (3)
abstracting: (79<=a1_dot)
states: 0
abstracting: (AstopOK_dot<=sum(n2_tsid2, n2_tsid1, n2_tsid0))
states: 786
abstracting: (46<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0))
states: 0
abstracting: (sum(s5_tsid2, s5_tsid1, s5_tsid0)<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0))
states: 459
-> the formula is FALSE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-14 FALSE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 0.188sec

checking: EF [~ [[[[70<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0) | [sum(n2_tsid2, n2_tsid1, n2_tsid0)<=AstopOK_dot | ~ [22<=sum(n1_tsid2, n1_tsid1, n1_tsid0)]]] | [[AstopAbort_dot<=sum(n6_tsid2, n6_tsid1, n6_tsid0) | [~ [[[sum(s6_tsid2, s6_tsid1, s6_tsid0)<=sum(s3_tsid2, s3_tsid1, s3_tsid0) & sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)<=95] | [sum(s2_tsid2, s2_tsid1, s2_tsid0)<=sum(s3_tsid2, s3_tsid1, s3_tsid0) & sum(n1_tsid2, n1_tsid1, n1_tsid0)<=85]]] | ~ [[61<=a3_dot | CstopAbort_dot<=0]]]] | 54<=SstopAbort_dot]] & ~ [[~ [[~ [[sum(s3_tsid2, s3_tsid1, s3_tsid0)<=77 & 48<=a2_dot]] & [[sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=sum(n2_tsid2, n2_tsid1, n2_tsid0) | sum(s3_tsid2, s3_tsid1, s3_tsid0)<=76] & sum(s5_tsid2, s5_tsid1, s5_tsid0)<=67]]] | [~ [[[sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)<=a3_dot | 64<=a3_dot] & ~ [Astart_dot<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0)]]] | [~ [[sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=sum(s3_tsid2, s3_tsid1, s3_tsid0) & 14<=malicious_reservoir_dot]] & [~ [sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)<=sum(s2_tsid2, s2_tsid1, s2_tsid0)] & sum(n4_tsid2, n4_tsid1, n4_tsid0)<=85]]]]]]]]
normalized: E [true U ~ [[~ [[[[[~ [sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)<=sum(s2_tsid2, s2_tsid1, s2_tsid0)] & sum(n4_tsid2, n4_tsid1, n4_tsid0)<=85] & ~ [[sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=sum(s3_tsid2, s3_tsid1, s3_tsid0) & 14<=malicious_reservoir_dot]]] | ~ [[~ [Astart_dot<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0)] & [sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)<=a3_dot | 64<=a3_dot]]]] | ~ [[[[sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=sum(n2_tsid2, n2_tsid1, n2_tsid0) | sum(s3_tsid2, s3_tsid1, s3_tsid0)<=76] & sum(s5_tsid2, s5_tsid1, s5_tsid0)<=67] & ~ [[sum(s3_tsid2, s3_tsid1, s3_tsid0)<=77 & 48<=a2_dot]]]]]] & [[54<=SstopAbort_dot | [AstopAbort_dot<=sum(n6_tsid2, n6_tsid1, n6_tsid0) | [~ [[61<=a3_dot | CstopAbort_dot<=0]] | ~ [[[sum(s2_tsid2, s2_tsid1, s2_tsid0)<=sum(s3_tsid2, s3_tsid1, s3_tsid0) & sum(n1_tsid2, n1_tsid1, n1_tsid0)<=85] | [sum(s6_tsid2, s6_tsid1, s6_tsid0)<=sum(s3_tsid2, s3_tsid1, s3_tsid0) & sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)<=95]]]]]] | [70<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0) | [sum(n2_tsid2, n2_tsid1, n2_tsid0)<=AstopOK_dot | ~ [22<=sum(n1_tsid2, n1_tsid1, n1_tsid0)]]]]]]]

abstracting: (22<=sum(n1_tsid2, n1_tsid1, n1_tsid0))
states: 0
abstracting: (sum(n2_tsid2, n2_tsid1, n2_tsid0)<=AstopOK_dot)
states: 973
abstracting: (70<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0))
states: 0
abstracting: (sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)<=95)
states: 1,029 (3)
abstracting: (sum(s6_tsid2, s6_tsid1, s6_tsid0)<=sum(s3_tsid2, s3_tsid1, s3_tsid0))
states: 711
abstracting: (sum(n1_tsid2, n1_tsid1, n1_tsid0)<=85)
states: 1,029 (3)
abstracting: (sum(s2_tsid2, s2_tsid1, s2_tsid0)<=sum(s3_tsid2, s3_tsid1, s3_tsid0))
states: 951
abstracting: (CstopAbort_dot<=0)
states: 732
abstracting: (61<=a3_dot)
states: 0
abstracting: (AstopAbort_dot<=sum(n6_tsid2, n6_tsid1, n6_tsid0))
states: 953
abstracting: (54<=SstopAbort_dot)
states: 0
abstracting: (48<=a2_dot)
states: 0
abstracting: (sum(s3_tsid2, s3_tsid1, s3_tsid0)<=77)
states: 1,029 (3)
abstracting: (sum(s5_tsid2, s5_tsid1, s5_tsid0)<=67)
states: 1,029 (3)
abstracting: (sum(s3_tsid2, s3_tsid1, s3_tsid0)<=76)
states: 1,029 (3)
abstracting: (sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=sum(n2_tsid2, n2_tsid1, n2_tsid0))
states: 542
abstracting: (64<=a3_dot)
states: 0
abstracting: (sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)<=a3_dot)
states: 663
abstracting: (Astart_dot<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0))
states: 1,025 (3)
abstracting: (14<=malicious_reservoir_dot)
states: 0
abstracting: (sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=sum(s3_tsid2, s3_tsid1, s3_tsid0))
states: 540
abstracting: (sum(n4_tsid2, n4_tsid1, n4_tsid0)<=85)
states: 1,029 (3)
abstracting: (sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)<=sum(s2_tsid2, s2_tsid1, s2_tsid0))
states: 663
-> the formula is TRUE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-08 TRUE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 0.360sec

checking: EF [~ [[~ [[[[AstopAbort_dot<=70 | ~ [a2_dot<=malicious_reservoir_dot]] & [[~ [sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)] & [2<=sum(n4_tsid2, n4_tsid1, n4_tsid0) | [sum(s3_tsid2, s3_tsid1, s3_tsid0)<=a1_dot & sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)<=74]]] & 17<=sum(n1_tsid2, n1_tsid1, n1_tsid0)]] | sum(s2_tsid2, s2_tsid1, s2_tsid0)<=36]] | [[sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0)<=sum(n4_tsid2, n4_tsid1, n4_tsid0) | [[SstopAbort_dot<=13 & 47<=a2_dot] | [~ [[[sum(s5_tsid2, s5_tsid1, s5_tsid0)<=19 & 74<=sum(n2_tsid2, n2_tsid1, n2_tsid0)] | [84<=sum(n1_tsid2, n1_tsid1, n1_tsid0) | sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)<=a3_dot]]] | ~ [66<=AstopAbort_dot]]]] & [[[[AstopAbort_dot<=93 | ~ [SstopAbort_dot<=56]] & [~ [[SstopAbort_dot<=99 & 48<=a3_dot]] | sum(n3_tsid2, n3_tsid1, n3_tsid0)<=42]] & [~ [[sum(s4_tsid2, s4_tsid1, s4_tsid0)<=sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0) & AstopAbort_dot<=36]] & sum(n4_tsid2, n4_tsid1, n4_tsid0)<=a5_dot]] & [~ [[sum(s2_tsid2, s2_tsid1, s2_tsid0)<=13 | ~ [AstopAbort_dot<=87]]] & ~ [sum(n5_tsid2, n5_tsid1, n5_tsid0)<=a2_dot]]]]]]]
normalized: E [true U ~ [[[[[[[sum(n3_tsid2, n3_tsid1, n3_tsid0)<=42 | ~ [[SstopAbort_dot<=99 & 48<=a3_dot]]] & [AstopAbort_dot<=93 | ~ [SstopAbort_dot<=56]]] & [sum(n4_tsid2, n4_tsid1, n4_tsid0)<=a5_dot & ~ [[sum(s4_tsid2, s4_tsid1, s4_tsid0)<=sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0) & AstopAbort_dot<=36]]]] & [~ [[sum(s2_tsid2, s2_tsid1, s2_tsid0)<=13 | ~ [AstopAbort_dot<=87]]] & ~ [sum(n5_tsid2, n5_tsid1, n5_tsid0)<=a2_dot]]] & [sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0)<=sum(n4_tsid2, n4_tsid1, n4_tsid0) | [[~ [66<=AstopAbort_dot] | ~ [[[84<=sum(n1_tsid2, n1_tsid1, n1_tsid0) | sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)<=a3_dot] | [sum(s5_tsid2, s5_tsid1, s5_tsid0)<=19 & 74<=sum(n2_tsid2, n2_tsid1, n2_tsid0)]]]] | [SstopAbort_dot<=13 & 47<=a2_dot]]]] | ~ [[sum(s2_tsid2, s2_tsid1, s2_tsid0)<=36 | [[17<=sum(n1_tsid2, n1_tsid1, n1_tsid0) & [[2<=sum(n4_tsid2, n4_tsid1, n4_tsid0) | [sum(s3_tsid2, s3_tsid1, s3_tsid0)<=a1_dot & sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)<=74]] & ~ [sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)]]] & [AstopAbort_dot<=70 | ~ [a2_dot<=malicious_reservoir_dot]]]]]]]]

abstracting: (a2_dot<=malicious_reservoir_dot)
states: 1,026 (3)
abstracting: (AstopAbort_dot<=70)
states: 1,029 (3)
abstracting: (sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0))
states: 666
abstracting: (sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)<=74)
states: 1,029 (3)
abstracting: (sum(s3_tsid2, s3_tsid1, s3_tsid0)<=a1_dot)
states: 843
abstracting: (2<=sum(n4_tsid2, n4_tsid1, n4_tsid0))
states: 32
abstracting: (17<=sum(n1_tsid2, n1_tsid1, n1_tsid0))
states: 0
abstracting: (sum(s2_tsid2, s2_tsid1, s2_tsid0)<=36)
states: 1,029 (3)
abstracting: (47<=a2_dot)
states: 0
abstracting: (SstopAbort_dot<=13)
states: 1,029 (3)
abstracting: (74<=sum(n2_tsid2, n2_tsid1, n2_tsid0))
states: 0
abstracting: (sum(s5_tsid2, s5_tsid1, s5_tsid0)<=19)
states: 1,029 (3)
abstracting: (sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)<=a3_dot)
states: 666
abstracting: (84<=sum(n1_tsid2, n1_tsid1, n1_tsid0))
states: 0
abstracting: (66<=AstopAbort_dot)
states: 0
abstracting: (sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0)<=sum(n4_tsid2, n4_tsid1, n4_tsid0))
states: 576
abstracting: (sum(n5_tsid2, n5_tsid1, n5_tsid0)<=a2_dot)
states: 877
abstracting: (AstopAbort_dot<=87)
states: 1,029 (3)
abstracting: (sum(s2_tsid2, s2_tsid1, s2_tsid0)<=13)
states: 1,029 (3)
abstracting: (AstopAbort_dot<=36)
states: 1,029 (3)
abstracting: (sum(s4_tsid2, s4_tsid1, s4_tsid0)<=sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0))
states: 876
abstracting: (sum(n4_tsid2, n4_tsid1, n4_tsid0)<=a5_dot)
states: 973
abstracting: (SstopAbort_dot<=56)
states: 1,029 (3)
abstracting: (AstopAbort_dot<=93)
states: 1,029 (3)
abstracting: (48<=a3_dot)
states: 0
abstracting: (SstopAbort_dot<=99)
states: 1,029 (3)
abstracting: (sum(n3_tsid2, n3_tsid1, n3_tsid0)<=42)
states: 1,029 (3)
-> the formula is TRUE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-06 TRUE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 0.372sec

checking: EF [[[~ [[[~ [sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=malicious_reservoir_dot] & sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)<=sum(n5_tsid2, n5_tsid1, n5_tsid0)] & ~ [[[sum(s3_tsid2, s3_tsid1, s3_tsid0)<=sum(s4_tsid2, s4_tsid1, s4_tsid0) | sum(n2_tsid2, n2_tsid1, n2_tsid0)<=malicious_reservoir_dot] & [57<=sum(c1_tsid2, c1_tsid1, c1_tsid0) & [[AstopAbort_dot<=sum(n2_tsid2, n2_tsid1, n2_tsid0) | 55<=AstopAbort_dot] | sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)<=59]]]]]] | [[[~ [malicious_reservoir_dot<=malicious_reservoir_dot] & [[[[33<=sum(s4_tsid2, s4_tsid1, s4_tsid0) & a2_dot<=26] & ~ [AstopOK_dot<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)]] & ~ [[SstopAbort_dot<=sum(n4_tsid2, n4_tsid1, n4_tsid0) | malicious_reservoir_dot<=39]]] | a2_dot<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)]] | [38<=a1_dot | [a1_dot<=SstopAbort_dot | [[[sum(s3_tsid2, s3_tsid1, s3_tsid0)<=99 | 88<=SstopAbort_dot] | [a4_dot<=sum(c1_tsid2, c1_tsid1, c1_tsid0) & sum(s2_tsid2, s2_tsid1, s2_tsid0)<=19]] | [[Astart_dot<=68 | malicious_reservoir_dot<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)] & [19<=sum(s4_tsid2, s4_tsid1, s4_tsid0) & sum(n5_tsid2, n5_tsid1, n5_tsid0)<=63]]]]]] | AstopOK_dot<=86]] | 36<=sum(s6_tsid2, s6_tsid1, s6_tsid0)]]
normalized: E [true U [36<=sum(s6_tsid2, s6_tsid1, s6_tsid0) | [~ [[~ [[[57<=sum(c1_tsid2, c1_tsid1, c1_tsid0) & [sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)<=59 | [AstopAbort_dot<=sum(n2_tsid2, n2_tsid1, n2_tsid0) | 55<=AstopAbort_dot]]] & [sum(s3_tsid2, s3_tsid1, s3_tsid0)<=sum(s4_tsid2, s4_tsid1, s4_tsid0) | sum(n2_tsid2, n2_tsid1, n2_tsid0)<=malicious_reservoir_dot]]] & [sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)<=sum(n5_tsid2, n5_tsid1, n5_tsid0) & ~ [sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=malicious_reservoir_dot]]]] | [AstopOK_dot<=86 | [[38<=a1_dot | [a1_dot<=SstopAbort_dot | [[[Astart_dot<=68 | malicious_reservoir_dot<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)] & [19<=sum(s4_tsid2, s4_tsid1, s4_tsid0) & sum(n5_tsid2, n5_tsid1, n5_tsid0)<=63]] | [[a4_dot<=sum(c1_tsid2, c1_tsid1, c1_tsid0) & sum(s2_tsid2, s2_tsid1, s2_tsid0)<=19] | [sum(s3_tsid2, s3_tsid1, s3_tsid0)<=99 | 88<=SstopAbort_dot]]]]] | [[a2_dot<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0) | [~ [[SstopAbort_dot<=sum(n4_tsid2, n4_tsid1, n4_tsid0) | malicious_reservoir_dot<=39]] & [~ [AstopOK_dot<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)] & [33<=sum(s4_tsid2, s4_tsid1, s4_tsid0) & a2_dot<=26]]]] & ~ [malicious_reservoir_dot<=malicious_reservoir_dot]]]]]]]

abstracting: (malicious_reservoir_dot<=malicious_reservoir_dot)
states: 1,029 (3)
abstracting: (a2_dot<=26)
states: 1,029 (3)
abstracting: (33<=sum(s4_tsid2, s4_tsid1, s4_tsid0))
states: 0
abstracting: (AstopOK_dot<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0))
states: 802
abstracting: (malicious_reservoir_dot<=39)
states: 1,029 (3)
abstracting: (SstopAbort_dot<=sum(n4_tsid2, n4_tsid1, n4_tsid0))
states: 558
abstracting: (a2_dot<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0))
states: 1,025 (3)
abstracting: (88<=SstopAbort_dot)
states: 0
abstracting: (sum(s3_tsid2, s3_tsid1, s3_tsid0)<=99)
states: 1,029 (3)
abstracting: (sum(s2_tsid2, s2_tsid1, s2_tsid0)<=19)
states: 1,029 (3)
abstracting: (a4_dot<=sum(c1_tsid2, c1_tsid1, c1_tsid0))
states: 1,025 (3)
abstracting: (sum(n5_tsid2, n5_tsid1, n5_tsid0)<=63)
states: 1,029 (3)
abstracting: (19<=sum(s4_tsid2, s4_tsid1, s4_tsid0))
states: 0
abstracting: (malicious_reservoir_dot<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0))
states: 831
abstracting: (Astart_dot<=68)
states: 1,029 (3)
abstracting: (a1_dot<=SstopAbort_dot)
states: 1,021 (3)
abstracting: (38<=a1_dot)
states: 0
abstracting: (AstopOK_dot<=86)
states: 1,029 (3)
abstracting: (sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=malicious_reservoir_dot)
states: 750
abstracting: (sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)<=sum(n5_tsid2, n5_tsid1, n5_tsid0))
states: 663
abstracting: (sum(n2_tsid2, n2_tsid1, n2_tsid0)<=malicious_reservoir_dot)
states: 979
abstracting: (sum(s3_tsid2, s3_tsid1, s3_tsid0)<=sum(s4_tsid2, s4_tsid1, s4_tsid0))
states: 897
abstracting: (55<=AstopAbort_dot)
states: 0
abstracting: (AstopAbort_dot<=sum(n2_tsid2, n2_tsid1, n2_tsid0))
states: 666
abstracting: (sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)<=59)
states: 1,029 (3)
abstracting: (57<=sum(c1_tsid2, c1_tsid1, c1_tsid0))
states: 0
abstracting: (36<=sum(s6_tsid2, s6_tsid1, s6_tsid0))
states: 0
-> the formula is TRUE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-01 TRUE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 0.408sec

checking: AG [[[sum(n6_tsid2, n6_tsid1, n6_tsid0)<=79 & [[[[[[~ [sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=sum(n5_tsid2, n5_tsid1, n5_tsid0)] | [45<=sum(n2_tsid2, n2_tsid1, n2_tsid0) | sum(s4_tsid2, s4_tsid1, s4_tsid0)<=79]] & sum(n4_tsid2, n4_tsid1, n4_tsid0)<=95] | a5_dot<=AstopOK_dot] | [[~ [[sum(s5_tsid2, s5_tsid1, s5_tsid0)<=AstopOK_dot & Astart_dot<=38]] | 13<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)] | [7<=AstopOK_dot & [[89<=SstopAbort_dot | sum(s3_tsid2, s3_tsid1, s3_tsid0)<=90] | a3_dot<=sum(n5_tsid2, n5_tsid1, n5_tsid0)]]]] | sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)<=36] | ~ [[[[[[sum(n2_tsid2, n2_tsid1, n2_tsid0)<=92 | sum(s2_tsid2, s2_tsid1, s2_tsid0)<=sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)] & 10<=sum(n1_tsid2, n1_tsid1, n1_tsid0)] & sum(n5_tsid2, n5_tsid1, n5_tsid0)<=57] | [sum(s4_tsid2, s4_tsid1, s4_tsid0)<=AstopOK_dot & a2_dot<=a3_dot]] & [[[78<=sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0) & ~ [SstopAbort_dot<=53]] | 71<=sum(n2_tsid2, n2_tsid1, n2_tsid0)] & [62<=SstopAbort_dot & [[99<=sum(n5_tsid2, n5_tsid1, n5_tsid0) & 68<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)] & a2_dot<=21]]]]]]] | [sum(n3_tsid2, n3_tsid1, n3_tsid0)<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0) | [[[sum(n5_tsid2, n5_tsid1, n5_tsid0)<=a5_dot & [sum(s4_tsid2, s4_tsid1, s4_tsid0)<=62 | [sum(s2_tsid2, s2_tsid1, s2_tsid0)<=malicious_reservoir_dot & [~ [sum(n5_tsid2, n5_tsid1, n5_tsid0)<=sum(n1_tsid2, n1_tsid1, n1_tsid0)] & [a5_dot<=80 & a1_dot<=sum(n1_tsid2, n1_tsid1, n1_tsid0)]]]]] | ~ [[~ [sum(s2_tsid2, s2_tsid1, s2_tsid0)<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)] & [sum(Sstart_tsid2, Sstart_tsid1, Sstart_tsid0)<=sum(n2_tsid2, n2_tsid1, n2_tsid0) | [[sum(s4_tsid2, s4_tsid1, s4_tsid0)<=15 & sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=72] | [sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)<=sum(s4_tsid2, s4_tsid1, s4_tsid0) & a4_dot<=a2_dot]]]]]] | [[sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=a1_dot & ~ [[[[53<=a1_dot & 15<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)] & [71<=sum(n3_tsid2, n3_tsid1, n3_tsid0) | sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=85]] | [~ [Astart_dot<=16] & [sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=54 & 30<=sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)]]]]] & ~ [80<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)]]]]]]
normalized: ~ [E [true U ~ [[[sum(n3_tsid2, n3_tsid1, n3_tsid0)<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0) | [[~ [80<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)] & [sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=a1_dot & ~ [[[[sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=54 & 30<=sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)] & ~ [Astart_dot<=16]] | [[71<=sum(n3_tsid2, n3_tsid1, n3_tsid0) | sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=85] & [53<=a1_dot & 15<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)]]]]]] | [~ [[[sum(Sstart_tsid2, Sstart_tsid1, Sstart_tsid0)<=sum(n2_tsid2, n2_tsid1, n2_tsid0) | [[sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)<=sum(s4_tsid2, s4_tsid1, s4_tsid0) & a4_dot<=a2_dot] | [sum(s4_tsid2, s4_tsid1, s4_tsid0)<=15 & sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=72]]] & ~ [sum(s2_tsid2, s2_tsid1, s2_tsid0)<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)]]] | [sum(n5_tsid2, n5_tsid1, n5_tsid0)<=a5_dot & [sum(s4_tsid2, s4_tsid1, s4_tsid0)<=62 | [sum(s2_tsid2, s2_tsid1, s2_tsid0)<=malicious_reservoir_dot & [[a5_dot<=80 & a1_dot<=sum(n1_tsid2, n1_tsid1, n1_tsid0)] & ~ [sum(n5_tsid2, n5_tsid1, n5_tsid0)<=sum(n1_tsid2, n1_tsid1, n1_tsid0)]]]]]]]] | [sum(n6_tsid2, n6_tsid1, n6_tsid0)<=79 & [~ [[[[62<=SstopAbort_dot & [a2_dot<=21 & [99<=sum(n5_tsid2, n5_tsid1, n5_tsid0) & 68<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)]]] & [71<=sum(n2_tsid2, n2_tsid1, n2_tsid0) | [78<=sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0) & ~ [SstopAbort_dot<=53]]]] & [[sum(s4_tsid2, s4_tsid1, s4_tsid0)<=AstopOK_dot & a2_dot<=a3_dot] | [sum(n5_tsid2, n5_tsid1, n5_tsid0)<=57 & [10<=sum(n1_tsid2, n1_tsid1, n1_tsid0) & [sum(n2_tsid2, n2_tsid1, n2_tsid0)<=92 | sum(s2_tsid2, s2_tsid1, s2_tsid0)<=sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)]]]]]] | [sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)<=36 | [[[7<=AstopOK_dot & [a3_dot<=sum(n5_tsid2, n5_tsid1, n5_tsid0) | [89<=SstopAbort_dot | sum(s3_tsid2, s3_tsid1, s3_tsid0)<=90]]] | [13<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0) | ~ [[sum(s5_tsid2, s5_tsid1, s5_tsid0)<=AstopOK_dot & Astart_dot<=38]]]] | [a5_dot<=AstopOK_dot | [sum(n4_tsid2, n4_tsid1, n4_tsid0)<=95 & [[45<=sum(n2_tsid2, n2_tsid1, n2_tsid0) | sum(s4_tsid2, s4_tsid1, s4_tsid0)<=79] | ~ [sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=sum(n5_tsid2, n5_tsid1, n5_tsid0)]]]]]]]]]]]]

abstracting: (sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=sum(n5_tsid2, n5_tsid1, n5_tsid0))
states: 750
abstracting: (sum(s4_tsid2, s4_tsid1, s4_tsid0)<=79)
states: 1,029 (3)
abstracting: (45<=sum(n2_tsid2, n2_tsid1, n2_tsid0))
states: 0
abstracting: (sum(n4_tsid2, n4_tsid1, n4_tsid0)<=95)
states: 1,029 (3)
abstracting: (a5_dot<=AstopOK_dot)
states: 710
abstracting: (Astart_dot<=38)
states: 1,029 (3)
abstracting: (sum(s5_tsid2, s5_tsid1, s5_tsid0)<=AstopOK_dot)
states: 546
abstracting: (13<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0))
states: 0
abstracting: (sum(s3_tsid2, s3_tsid1, s3_tsid0)<=90)
states: 1,029 (3)
abstracting: (89<=SstopAbort_dot)
states: 0
abstracting: (a3_dot<=sum(n5_tsid2, n5_tsid1, n5_tsid0))
states: 997
abstracting: (7<=AstopOK_dot)
states: 0
abstracting: (sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)<=36)
states: 1,029 (3)
abstracting: (sum(s2_tsid2, s2_tsid1, s2_tsid0)<=sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0))
states: 921
abstracting: (sum(n2_tsid2, n2_tsid1, n2_tsid0)<=92)
states: 1,029 (3)
abstracting: (10<=sum(n1_tsid2, n1_tsid1, n1_tsid0))
states: 0
abstracting: (sum(n5_tsid2, n5_tsid1, n5_tsid0)<=57)
states: 1,029 (3)
abstracting: (a2_dot<=a3_dot)
states: 1,025 (3)
abstracting: (sum(s4_tsid2, s4_tsid1, s4_tsid0)<=AstopOK_dot)
states: 891
abstracting: (SstopAbort_dot<=53)
states: 1,029 (3)
abstracting: (78<=sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0))
states: 0
abstracting: (71<=sum(n2_tsid2, n2_tsid1, n2_tsid0))
states: 0
abstracting: (68<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0))
states: 0
abstracting: (99<=sum(n5_tsid2, n5_tsid1, n5_tsid0))
states: 0
abstracting: (a2_dot<=21)
states: 1,029 (3)
abstracting: (62<=SstopAbort_dot)
states: 0
abstracting: (sum(n6_tsid2, n6_tsid1, n6_tsid0)<=79)
states: 1,029 (3)
abstracting: (sum(n5_tsid2, n5_tsid1, n5_tsid0)<=sum(n1_tsid2, n1_tsid1, n1_tsid0))
states: 877
abstracting: (a1_dot<=sum(n1_tsid2, n1_tsid1, n1_tsid0))
states: 1,025 (3)
abstracting: (a5_dot<=80)
states: 1,029 (3)
abstracting: (sum(s2_tsid2, s2_tsid1, s2_tsid0)<=malicious_reservoir_dot)
states: 933
abstracting: (sum(s4_tsid2, s4_tsid1, s4_tsid0)<=62)
states: 1,029 (3)
abstracting: (sum(n5_tsid2, n5_tsid1, n5_tsid0)<=a5_dot)
states: 925
abstracting: (sum(s2_tsid2, s2_tsid1, s2_tsid0)<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0))
states: 1,029 (3)
abstracting: (sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=72)
states: 1,029 (3)
abstracting: (sum(s4_tsid2, s4_tsid1, s4_tsid0)<=15)
states: 1,029 (3)
abstracting: (a4_dot<=a2_dot)
states: 1,025 (3)
abstracting: (sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)<=sum(s4_tsid2, s4_tsid1, s4_tsid0))
states: 666
abstracting: (sum(Sstart_tsid2, Sstart_tsid1, Sstart_tsid0)<=sum(n2_tsid2, n2_tsid1, n2_tsid0))
states: 1,005 (3)
abstracting: (15<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0))
states: 0
abstracting: (53<=a1_dot)
states: 0
abstracting: (sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=85)
states: 1,029 (3)
abstracting: (71<=sum(n3_tsid2, n3_tsid1, n3_tsid0))
states: 0
abstracting: (Astart_dot<=16)
states: 1,029 (3)
abstracting: (30<=sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0))
states: 0
abstracting: (sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=54)
states: 1,029 (3)
abstracting: (sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=a1_dot)
states: 534
abstracting: (80<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0))
states: 0
abstracting: (sum(n3_tsid2, n3_tsid1, n3_tsid0)<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0))
states: 1,029 (3)
-> the formula is TRUE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-04 TRUE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 0.864sec

checking: EF [~ [[[[[94<=sum(n4_tsid2, n4_tsid1, n4_tsid0) & [68<=sum(c1_tsid2, c1_tsid1, c1_tsid0) | [~ [sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=sum(Sstart_tsid2, Sstart_tsid1, Sstart_tsid0)] | 73<=sum(n3_tsid2, n3_tsid1, n3_tsid0)]]] & [[22<=sum(n2_tsid2, n2_tsid1, n2_tsid0) | ~ [[~ [sum(n2_tsid2, n2_tsid1, n2_tsid0)<=sum(n6_tsid2, n6_tsid1, n6_tsid0)] & [a2_dot<=CstopAbort_dot | sum(s3_tsid2, s3_tsid1, s3_tsid0)<=SstopAbort_dot]]]] & [sum(n6_tsid2, n6_tsid1, n6_tsid0)<=sum(s4_tsid2, s4_tsid1, s4_tsid0) | [sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)<=a3_dot & 24<=sum(n2_tsid2, n2_tsid1, n2_tsid0)]]]] & [[[[[~ [malicious_reservoir_dot<=61] | ~ [48<=sum(s2_tsid2, s2_tsid1, s2_tsid0)]] | [[70<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0) | malicious_reservoir_dot<=sum(Sstart_tsid2, Sstart_tsid1, Sstart_tsid0)] | ~ [sum(n1_tsid2, n1_tsid1, n1_tsid0)<=sum(n5_tsid2, n5_tsid1, n5_tsid0)]]] | [[[sum(n3_tsid2, n3_tsid1, n3_tsid0)<=98 & 90<=sum(s4_tsid2, s4_tsid1, s4_tsid0)] | [6<=sum(n4_tsid2, n4_tsid1, n4_tsid0) | sum(n2_tsid2, n2_tsid1, n2_tsid0)<=40]] & [[SstopAbort_dot<=sum(s5_tsid2, s5_tsid1, s5_tsid0) & sum(s3_tsid2, s3_tsid1, s3_tsid0)<=73] | ~ [86<=sum(s2_tsid2, s2_tsid1, s2_tsid0)]]]] & [89<=a4_dot & [sum(s5_tsid2, s5_tsid1, s5_tsid0)<=malicious_reservoir_dot | [sum(n6_tsid2, n6_tsid1, n6_tsid0)<=90 | [42<=sum(n5_tsid2, n5_tsid1, n5_tsid0) | 25<=sum(s5_tsid2, s5_tsid1, s5_tsid0)]]]]] & ~ [[94<=sum(s6_tsid2, s6_tsid1, s6_tsid0) | [[[sum(n5_tsid2, n5_tsid1, n5_tsid0)<=sum(s4_tsid2, s4_tsid1, s4_tsid0) & sum(n6_tsid2, n6_tsid1, n6_tsid0)<=26] | [sum(n4_tsid2, n4_tsid1, n4_tsid0)<=47 & a5_dot<=30]] & [[97<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0) & a5_dot<=CstopAbort_dot] | ~ [AstopOK_dot<=74]]]]]]] & [[~ [[[[~ [sum(n5_tsid2, n5_tsid1, n5_tsid0)<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)] | [81<=sum(n5_tsid2, n5_tsid1, n5_tsid0) | 4<=sum(n4_tsid2, n4_tsid1, n4_tsid0)]] | malicious_reservoir_dot<=12] | [[sum(s6_tsid2, s6_tsid1, s6_tsid0)<=17 | sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)<=CstopAbort_dot] | [[sum(n1_tsid2, n1_tsid1, n1_tsid0)<=70 | CstopAbort_dot<=sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)] | 30<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)]]]] | [[[[[a2_dot<=28 & CstopAbort_dot<=sum(s2_tsid2, s2_tsid1, s2_tsid0)] | ~ [sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=32]] | ~ [sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=33]] & [~ [31<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0)] | [[sum(n1_tsid2, n1_tsid1, n1_tsid0)<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0) & sum(s2_tsid2, s2_tsid1, s2_tsid0)<=84] & a1_dot<=sum(s6_tsid2, s6_tsid1, s6_tsid0)]]] & ~ [[~ [sum(s3_tsid2, s3_tsid1, s3_tsid0)<=21] & [~ [29<=a5_dot] & 83<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0)]]]]] & [sum(n6_tsid2, n6_tsid1, n6_tsid0)<=20 | [malicious_reservoir_dot<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0) | 90<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)]]]]]]
normalized: E [true U ~ [[[[[~ [[[83<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0) & ~ [29<=a5_dot]] & ~ [sum(s3_tsid2, s3_tsid1, s3_tsid0)<=21]]] & [[~ [31<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0)] | [a1_dot<=sum(s6_tsid2, s6_tsid1, s6_tsid0) & [sum(n1_tsid2, n1_tsid1, n1_tsid0)<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0) & sum(s2_tsid2, s2_tsid1, s2_tsid0)<=84]]] & [~ [sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=33] | [~ [sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=32] | [a2_dot<=28 & CstopAbort_dot<=sum(s2_tsid2, s2_tsid1, s2_tsid0)]]]]] | ~ [[[[30<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0) | [sum(n1_tsid2, n1_tsid1, n1_tsid0)<=70 | CstopAbort_dot<=sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)]] | [sum(s6_tsid2, s6_tsid1, s6_tsid0)<=17 | sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)<=CstopAbort_dot]] | [malicious_reservoir_dot<=12 | [[81<=sum(n5_tsid2, n5_tsid1, n5_tsid0) | 4<=sum(n4_tsid2, n4_tsid1, n4_tsid0)] | ~ [sum(n5_tsid2, n5_tsid1, n5_tsid0)<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)]]]]]] & [sum(n6_tsid2, n6_tsid1, n6_tsid0)<=20 | [malicious_reservoir_dot<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0) | 90<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)]]] & [[~ [[94<=sum(s6_tsid2, s6_tsid1, s6_tsid0) | [[[sum(n4_tsid2, n4_tsid1, n4_tsid0)<=47 & a5_dot<=30] | [sum(n5_tsid2, n5_tsid1, n5_tsid0)<=sum(s4_tsid2, s4_tsid1, s4_tsid0) & sum(n6_tsid2, n6_tsid1, n6_tsid0)<=26]] & [~ [AstopOK_dot<=74] | [97<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0) & a5_dot<=CstopAbort_dot]]]]] & [[89<=a4_dot & [sum(s5_tsid2, s5_tsid1, s5_tsid0)<=malicious_reservoir_dot | [sum(n6_tsid2, n6_tsid1, n6_tsid0)<=90 | [42<=sum(n5_tsid2, n5_tsid1, n5_tsid0) | 25<=sum(s5_tsid2, s5_tsid1, s5_tsid0)]]]] & [[[~ [86<=sum(s2_tsid2, s2_tsid1, s2_tsid0)] | [SstopAbort_dot<=sum(s5_tsid2, s5_tsid1, s5_tsid0) & sum(s3_tsid2, s3_tsid1, s3_tsid0)<=73]] & [[6<=sum(n4_tsid2, n4_tsid1, n4_tsid0) | sum(n2_tsid2, n2_tsid1, n2_tsid0)<=40] | [sum(n3_tsid2, n3_tsid1, n3_tsid0)<=98 & 90<=sum(s4_tsid2, s4_tsid1, s4_tsid0)]]] | [[~ [sum(n1_tsid2, n1_tsid1, n1_tsid0)<=sum(n5_tsid2, n5_tsid1, n5_tsid0)] | [70<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0) | malicious_reservoir_dot<=sum(Sstart_tsid2, Sstart_tsid1, Sstart_tsid0)]] | [~ [48<=sum(s2_tsid2, s2_tsid1, s2_tsid0)] | ~ [malicious_reservoir_dot<=61]]]]]] & [[[sum(n6_tsid2, n6_tsid1, n6_tsid0)<=sum(s4_tsid2, s4_tsid1, s4_tsid0) | [sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)<=a3_dot & 24<=sum(n2_tsid2, n2_tsid1, n2_tsid0)]] & [22<=sum(n2_tsid2, n2_tsid1, n2_tsid0) | ~ [[[a2_dot<=CstopAbort_dot | sum(s3_tsid2, s3_tsid1, s3_tsid0)<=SstopAbort_dot] & ~ [sum(n2_tsid2, n2_tsid1, n2_tsid0)<=sum(n6_tsid2, n6_tsid1, n6_tsid0)]]]]] & [94<=sum(n4_tsid2, n4_tsid1, n4_tsid0) & [68<=sum(c1_tsid2, c1_tsid1, c1_tsid0) | [73<=sum(n3_tsid2, n3_tsid1, n3_tsid0) | ~ [sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=sum(Sstart_tsid2, Sstart_tsid1, Sstart_tsid0)]]]]]]]]]

abstracting: (sum(n7_tsid2_tsid2, n7_tsid2_tsid1, n7_tsid2_tsid0, n7_tsid1_tsid2, n7_tsid1_tsid1, n7_tsid1_tsid0, n7_tsid0_tsid2, n7_tsid0_tsid1, n7_tsid0_tsid0)<=sum(Sstart_tsid2, Sstart_tsid1, Sstart_tsid0))
states: 750
abstracting: (73<=sum(n3_tsid2, n3_tsid1, n3_tsid0))
states: 0
abstracting: (68<=sum(c1_tsid2, c1_tsid1, c1_tsid0))
states: 0
abstracting: (94<=sum(n4_tsid2, n4_tsid1, n4_tsid0))
states: 0
abstracting: (sum(n2_tsid2, n2_tsid1, n2_tsid0)<=sum(n6_tsid2, n6_tsid1, n6_tsid0))
states: 973
abstracting: (sum(s3_tsid2, s3_tsid1, s3_tsid0)<=SstopAbort_dot)
states: 939
abstracting: (a2_dot<=CstopAbort_dot)
states: 1,025 (3)
abstracting: (22<=sum(n2_tsid2, n2_tsid1, n2_tsid0))
states: 0
abstracting: (24<=sum(n2_tsid2, n2_tsid1, n2_tsid0))
states: 0
abstracting: (sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0)<=a3_dot)
states: 981
abstracting: (sum(n6_tsid2, n6_tsid1, n6_tsid0)<=sum(s4_tsid2, s4_tsid1, s4_tsid0))
states: 431
abstracting: (malicious_reservoir_dot<=61)
states: 1,029 (3)
abstracting: (48<=sum(s2_tsid2, s2_tsid1, s2_tsid0))
states: 0
abstracting: (malicious_reservoir_dot<=sum(Sstart_tsid2, Sstart_tsid1, Sstart_tsid0))
states: 825
abstracting: (70<=sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0))
states: 0
abstracting: (sum(n1_tsid2, n1_tsid1, n1_tsid0)<=sum(n5_tsid2, n5_tsid1, n5_tsid0))
states: 973
abstracting: (90<=sum(s4_tsid2, s4_tsid1, s4_tsid0))
states: 0
abstracting: (sum(n3_tsid2, n3_tsid1, n3_tsid0)<=98)
states: 1,029 (3)
abstracting: (sum(n2_tsid2, n2_tsid1, n2_tsid0)<=40)
states: 1,029 (3)
abstracting: (6<=sum(n4_tsid2, n4_tsid1, n4_tsid0))
states: 0
abstracting: (sum(s3_tsid2, s3_tsid1, s3_tsid0)<=73)
states: 1,029 (3)
abstracting: (SstopAbort_dot<=sum(s5_tsid2, s5_tsid1, s5_tsid0))
states: 768
abstracting: (86<=sum(s2_tsid2, s2_tsid1, s2_tsid0))
states: 0
abstracting: (25<=sum(s5_tsid2, s5_tsid1, s5_tsid0))
states: 0
abstracting: (42<=sum(n5_tsid2, n5_tsid1, n5_tsid0))
states: 0
abstracting: (sum(n6_tsid2, n6_tsid1, n6_tsid0)<=90)
states: 1,029 (3)
abstracting: (sum(s5_tsid2, s5_tsid1, s5_tsid0)<=malicious_reservoir_dot)
states: 522
abstracting: (89<=a4_dot)
states: 0
abstracting: (a5_dot<=CstopAbort_dot)
states: 809
abstracting: (97<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0))
states: 0
abstracting: (AstopOK_dot<=74)
states: 1,029 (3)
abstracting: (sum(n6_tsid2, n6_tsid1, n6_tsid0)<=26)
states: 1,029 (3)
abstracting: (sum(n5_tsid2, n5_tsid1, n5_tsid0)<=sum(s4_tsid2, s4_tsid1, s4_tsid0))
states: 937
abstracting: (a5_dot<=30)
states: 1,029 (3)
abstracting: (sum(n4_tsid2, n4_tsid1, n4_tsid0)<=47)
states: 1,029 (3)
abstracting: (94<=sum(s6_tsid2, s6_tsid1, s6_tsid0))
states: 0
abstracting: (90<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0))
states: 0
abstracting: (malicious_reservoir_dot<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0))
states: 831
abstracting: (sum(n6_tsid2, n6_tsid1, n6_tsid0)<=20)
states: 1,029 (3)
abstracting: (sum(n5_tsid2, n5_tsid1, n5_tsid0)<=sum(CstopOK_tsid2, CstopOK_tsid1, CstopOK_tsid0))
states: 877
abstracting: (4<=sum(n4_tsid2, n4_tsid1, n4_tsid0))
states: 0
abstracting: (81<=sum(n5_tsid2, n5_tsid1, n5_tsid0))
states: 0
abstracting: (malicious_reservoir_dot<=12)
states: 1,029 (3)
abstracting: (sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0)<=CstopAbort_dot)
states: 771
abstracting: (sum(s6_tsid2, s6_tsid1, s6_tsid0)<=17)
states: 1,029 (3)
abstracting: (CstopAbort_dot<=sum(SstopOK_tsid2, SstopOK_tsid1, SstopOK_tsid0))
states: 930
abstracting: (sum(n1_tsid2, n1_tsid1, n1_tsid0)<=70)
states: 1,029 (3)
abstracting: (30<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0))
states: 0
abstracting: (CstopAbort_dot<=sum(s2_tsid2, s2_tsid1, s2_tsid0))
states: 732
abstracting: (a2_dot<=28)
states: 1,029 (3)
abstracting: (sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=32)
states: 1,029 (3)
abstracting: (sum(Cstart_tsid2, Cstart_tsid1, Cstart_tsid0)<=33)
states: 1,029 (3)
abstracting: (sum(s2_tsid2, s2_tsid1, s2_tsid0)<=84)
states: 1,029 (3)
abstracting: (sum(n1_tsid2, n1_tsid1, n1_tsid0)<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0))
states: 973
abstracting: (a1_dot<=sum(s6_tsid2, s6_tsid1, s6_tsid0))
states: 997
abstracting: (31<=sum(n8_tsid2_tsid2, n8_tsid2_tsid1, n8_tsid2_tsid0, n8_tsid1_tsid2, n8_tsid1_tsid1, n8_tsid1_tsid0, n8_tsid0_tsid2, n8_tsid0_tsid1, n8_tsid0_tsid0))
states: 0
abstracting: (sum(s3_tsid2, s3_tsid1, s3_tsid0)<=21)
states: 1,029 (3)
abstracting: (29<=a5_dot)
states: 0
abstracting: (83<=sum(n9_tsid2_tsid2, n9_tsid2_tsid1, n9_tsid2_tsid0, n9_tsid1_tsid2, n9_tsid1_tsid1, n9_tsid1_tsid0, n9_tsid0_tsid2, n9_tsid0_tsid1, n9_tsid0_tsid0))
states: 0
-> the formula is TRUE

FORMULA QuasiCertifProtocol-COL-02-ReachabilityCardinality-05 TRUE TECHNIQUES SEQUENTIAL_PROCESSING DECISION_DIAGRAMS UNFOLDING_TO_PT

MC time: 0m 1.087sec

totally nodes used: 61506 (6.2e+04)
number of garbage collections: 0
fire ops cache: hits/miss/sum: 27284 215128 242412
used/not used/entry size/cache size: 249539 66859325 16 1024MB
basic ops cache: hits/miss/sum: 29863 215347 245210
used/not used/entry size/cache size: 274464 16502752 12 192MB
unary ops cache: hits/miss/sum: 0 0 0
used/not used/entry size/cache size: 0 16777216 8 128MB
abstract ops cache: hits/miss/sum: 0 44906 44906
used/not used/entry size/cache size: 1 16777215 12 192MB
state nr cache: hits/miss/sum: 2975 12743 15718
used/not used/entry size/cache size: 12743 8375865 32 256MB
max state cache: hits/miss/sum: 0 0 0
used/not used/entry size/cache size: 0 8388608 32 256MB
uniqueHash elements/entry size/size: 67108864 4 256MB
0 67048685
1 59015
2 1114
3 42
4 3
5 2
6 2
7 1
8 0
9 0
>= 10 0

Total processing time: 0m10.383sec


BK_STOP 1678821267823

--------------------
content from stderr:

check for maximal unmarked siphon
ok
check for constant places
ok
check if there are places and transitions
ok
check if there are transitions without pre-places
ok
check if at least one transition is enabled in m0
ok
check if there are transitions that can never fire
ok


initing FirstDep: 0m 0.000sec


iterations count:899 (16), effective:56 (1)

initing FirstDep: 0m 0.000sec


iterations count:83 (1), effective:4 (0)

iterations count:175 (3), effective:18 (0)

iterations count:118 (2), effective:2 (0)

iterations count:56 (1), effective:0 (0)

iterations count:57 (1), effective:1 (0)

iterations count:56 (1), effective:0 (0)

iterations count:57 (1), effective:1 (0)

iterations count:56 (1), effective:0 (0)

iterations count:56 (1), effective:0 (0)

iterations count:56 (1), effective:0 (0)

Sequence of Actions to be Executed by the VM

This is useful if one wants to reexecute the tool in the VM from the submitted image disk.

set -x
# this is for BenchKit: configuration of major elements for the test
export BK_INPUT="QuasiCertifProtocol-COL-02"
export BK_EXAMINATION="ReachabilityCardinality"
export BK_TOOL="marcie"
export BK_RESULT_DIR="/tmp/BK_RESULTS/OUTPUTS"
export BK_TIME_CONFINEMENT="3600"
export BK_MEMORY_CONFINEMENT="16384"
export BK_BIN_PATH="/home/mcc/BenchKit/bin/"

# this is specific to your benchmark or test

export BIN_DIR="$HOME/BenchKit/bin"

# remove the execution directoty if it exists (to avoid increse of .vmdk images)
if [ -d execution ] ; then
rm -rf execution
fi

# this is for BenchKit: explicit launching of the test
echo "====================================================================="
echo " Generated by BenchKit 2-5348"
echo " Executing tool marcie"
echo " Input is QuasiCertifProtocol-COL-02, examination is ReachabilityCardinality"
echo " Time confinement is $BK_TIME_CONFINEMENT seconds"
echo " Memory confinement is 16384 MBytes"
echo " Number of cores is 1"
echo " Run identifier is r289-tall-167873940900806"
echo "====================================================================="
echo
echo "--------------------"
echo "preparation of the directory to be used:"

tar xzf /home/mcc/BenchKit/INPUTS/QuasiCertifProtocol-COL-02.tgz
mv QuasiCertifProtocol-COL-02 execution
cd execution
if [ "ReachabilityCardinality" = "ReachabilityDeadlock" ] || [ "ReachabilityCardinality" = "UpperBounds" ] || [ "ReachabilityCardinality" = "QuasiLiveness" ] || [ "ReachabilityCardinality" = "StableMarking" ] || [ "ReachabilityCardinality" = "Liveness" ] || [ "ReachabilityCardinality" = "OneSafe" ] || [ "ReachabilityCardinality" = "StateSpace" ]; then
rm -f GenericPropertiesVerdict.xml
fi
pwd
ls -lh

echo
echo "--------------------"
echo "content from stdout:"
echo
echo "=== Data for post analysis generated by BenchKit (invocation template)"
echo
if [ "ReachabilityCardinality" = "UpperBounds" ] ; then
echo "The expected result is a vector of positive values"
echo NUM_VECTOR
elif [ "ReachabilityCardinality" != "StateSpace" ] ; then
echo "The expected result is a vector of booleans"
echo BOOL_VECTOR
else
echo "no data necessary for post analysis"
fi
echo
if [ -f "ReachabilityCardinality.txt" ] ; then
echo "here is the order used to build the result vector(from text file)"
for x in $(grep Property ReachabilityCardinality.txt | cut -d ' ' -f 2 | sort -u) ; do
echo "FORMULA_NAME $x"
done
elif [ -f "ReachabilityCardinality.xml" ] ; then # for cunf (txt files deleted;-)
echo echo "here is the order used to build the result vector(from xml file)"
for x in $(grep '' ReachabilityCardinality.xml | cut -d '>' -f 2 | cut -d '<' -f 1 | sort -u) ; do
echo "FORMULA_NAME $x"
done
elif [ "ReachabilityCardinality" = "ReachabilityDeadlock" ] || [ "ReachabilityCardinality" = "QuasiLiveness" ] || [ "ReachabilityCardinality" = "StableMarking" ] || [ "ReachabilityCardinality" = "Liveness" ] || [ "ReachabilityCardinality" = "OneSafe" ] ; then
echo "FORMULA_NAME ReachabilityCardinality"
fi
echo
echo "=== Now, execution of the tool begins"
echo
echo -n "BK_START "
date -u +%s%3N
echo
timeout -s 9 $BK_TIME_CONFINEMENT bash -c "/home/mcc/BenchKit/BenchKit_head.sh 2> STDERR ; echo ; echo -n \"BK_STOP \" ; date -u +%s%3N"
if [ $? -eq 137 ] ; then
echo
echo "BK_TIME_CONFINEMENT_REACHED"
fi
echo
echo "--------------------"
echo "content from stderr:"
echo
cat STDERR ;