Reactive Systems: Modelling, Specification and Verification - Cs.ioc.ee
Reactive Systems: Modelling, Specification and Verification - Cs.ioc.ee
Reactive Systems: Modelling, Specification and Verification - Cs.ioc.ee
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
124 CHAPTER 6. HML WITH RECURSION<br />
The second equation states the, equally obvious, fact that every state satisfies tt<br />
irrespective of the set of states that are assumed to satisfy X. The last equation<br />
instead says that to calculate the set of states satisfying the formula [a]F under the<br />
assumption that the states in S satisfy X, it is sufficient to<br />
1. compute the set of states satisfying the formula F under the assumption that<br />
the states in S satisfy X, <strong>and</strong> then<br />
2. find the collection of states that end up in that set no matter how they perform<br />
an a-labelled transition.<br />
Exercise 6.4 Given the transition graph from Example 6.2, use the above definition<br />
to calculate O [b]ff∧[a]X({p2}). <br />
One can show that for every formula F , the function OF is monotonic (s<strong>ee</strong> Definition<br />
4.4) over the complete lattice (2 Proc , ⊆). In other words, for all subsets<br />
S1, S2 of Proc, if S1 ⊆ S2 then OF (S1) ⊆ OF (S2).<br />
Exercise 6.5 Show that OF is monotonic for all F . Consider what will happen if<br />
we introduce negation into our logic. Hint: Use structural induction on F . <br />
As mentioned before, the idea underlying the definition of the function OF is that<br />
if [X ] ⊆ Proc gives the set of processes that satisfy X, then OF ([X ]) will be the<br />
set of processes that satisfy F . What is this set [X ] then? Syntactically we shall<br />
assume that [X ] is implicitly given by a recursive equation for X of the form<br />
X min<br />
= FX or X max<br />
= FX .<br />
As shown in the previous section, such an equation can be interpreted as the set<br />
equation<br />
[X ] = OFX ([X ]) . (6.6)<br />
As OFX is a monotonic function over a complete lattice we know that (6.6) has<br />
solutions, i.e., that OFX has fixed points. In particular Tarski’s fixed point theorem<br />
(s<strong>ee</strong> Theorem 4.1) gives us that there is a unique largest fixed point, denoted by<br />
FIX OFX , <strong>and</strong> also a unique least one, denoted by fix OFX , given respectively by<br />
FIX OFX = {S ⊆ Proc | S ⊆ OFX (S)} <strong>and</strong><br />
fix OFX = {S ⊆ Proc | OFX (S) ⊆ S} .<br />
A set S with the property that S ⊆ OFX (S) is called a post-fixed point for OFX .<br />
Correspondingly S is a pre-fixed point for OFX if OFX (S) ⊆ S.