Reactive Systems: Modelling, Specification and Verification - Cs.ioc.ee
Reactive Systems: Modelling, Specification and Verification - Cs.ioc.ee
Reactive Systems: Modelling, Specification and Verification - Cs.ioc.ee
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
126 CHAPTER 6. HML WITH RECURSION<br />
transition system. We therefore have that our first approximation to the largest<br />
fixed point is the set<br />
OFX ({s, s1, s2, t, t1}) = (〈·b·〉{s, s1, s2, t, t1}) ∩ [·b·]{s, s1, s2, t, t1}<br />
= {s1, s2, t1} ∩ {s, s1, s2, t, t1}<br />
= {s1, s2, t1} .<br />
Note that our c<strong>and</strong>idate solution to the equation has shrunk in size, since an application<br />
of OFX to the set of all processes has removed the states s <strong>and</strong> t from our<br />
c<strong>and</strong>idate solution. Intuitively, this is because, by applying OFX to the set of all<br />
states, we have found a reason why s <strong>and</strong> t do not afford the property specified by<br />
X max<br />
= 〈b〉tt ∧ [b]X ,<br />
namely that s <strong>and</strong> t do not have a b-labelled outgoing transition, <strong>and</strong> therefore that<br />
neither of them is in the set 〈·b·〉{s, s1, s2, t, t1}.<br />
Following our iterative algorithm for the computation of the largest fixed point,<br />
we now apply the function OFX to the new c<strong>and</strong>idate largest solution, namely<br />
{s1, s2, t1}. We now have that<br />
OFX ({s1, s2, t1}) = (〈·b·〉{s, s1, s2, t, t1}) ∩ [·b·]{s1, s2, t1}<br />
= {s1, s2, t1} ∩ {s, s1, s2, t, t1}<br />
= {s1, s2, t1} .<br />
(You should convince yourselves that the above calculations are correct!) We have<br />
now found that {s1, s2, t1} is a fixed point of the function OFX . By Theorem 6.1,<br />
this is the largest fixed point <strong>and</strong> therefore states s1, s2 <strong>and</strong> t1 are the only states in<br />
our labelled transition system that satisfy the property<br />
X max<br />
= 〈b〉tt ∧ [b]X .<br />
This is in complete agr<strong>ee</strong>ment with our intuition because those are the only states<br />
that can perform a b-action in all states that they can reach by performing sequences<br />
of b-labelled transitions.<br />
Exercise 6.6 Consider the property<br />
Y min<br />
= 〈b〉tt ∨ 〈{a, b}〉Y .<br />
Use Theorem 6.1 to compute the set of processes in the labelled transition system<br />
above that satisfy this property.