On improving efficiency of model checking through systematically ...

ok’ = true and true
and ((not init and not y-x-1>=0) or (init));
init’ = true and true
and (false);
assertion true and true
and ((not ok and init and not p2 and p1) or
(not ok and init and p2 and not p1) or
(ok and not p2 and p1) or (ok and p2 and not p1));
initial (init) and true;
final (not ok and not init) and true;
automaton
location bad_0 : (not ok and not init) and (y+x-2>=0 and -y+x+2>=0 and
y-x>=0);
location init_0 : (init) and true;
location good_0 : (ok and not init) and (y>=0 and x>=0 and -y+x+1>=0);
edge (init_0,good_0) : true and true
and ((not p2 and p1) or (p2 and not p1));
edge (good_0,bad_0) : true and (y-x-1>=0)
and ((not p2 and p1) or (p2 and not p1));
edge (good_0,good_0) : true and (not y-x-1>=0)
and ((not p2 and p1) or (p2 and not p1));
B.2 Subway system
state
Init0, PV40_pok, PV214_avance_0, PV216_retard_0, PV217_retard_1,
PV215_avance_1, b0, b1 : bool;
P_V210_nB_0, P_V36_nS, P_V211_nB_1, P_V329_c, P_V328_c : int;
input
B_0, S, B_1 : bool;
transition
P_V210_nB_0’ = if (Init0) and true
then 0
else if (not Init0 and B_0) and true
then P_V210_nB_0+1
else if (not Init0 and not B_0) and true
then P_V210_nB_0
else 0;
P_V36_nS’ = if (Init0) and true
then 0
else if (not Init0 and S) and true
then P_V36_nS+1
else if (not Init0 and not S) and true
then P_V36_nS
75