70

nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

  • Upload
    others

  • View
    0

  • Download
    0

Embed Size (px)

Citation preview

Page 1: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

� ����� � ��� � ���� � ���������

������� �"!��$#&%(')%)*�%,+.-�/0� 1"12%435*��6�$#&798:%;!<!67=+> 8?%43,@5�A/B�:CD/97E'F�G!<!67=+�H %)�6I(��JK7B1L!��M�6�M+%435*NH %)�6I(�����A'F� �O7

PRQTSVU&W XTY[Z\S^]`_a_\ZcbBYedgfahji^k"lgicm`ngn\op]=dg]rqsUtb0fjuwvE]wxzy�P{v0Zg|e}

~A_aZgY�|��p�w�6���L�����c�"�����0�c�2�G�B���

Page 2: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

U��LY�����]���L_�fjuwv.Y���<Zcb0v.]��,v ��f��LY��EvEbBY�����v0Ye]`u�<Z�����Z��gfr]��,v �Lf�� ������� _�]���fj|�����f����gf�bjk�Z=d�ZgY�|[Z��<|ef Zcv� �^� �"!$#%#c�^�����L���B���"�����B���2�G�B�c�'&oGZcb0v � ]��)v �LY��(��]���L_�fjuwv �)�LZjdgf*��f�fju v0Z��gfju�� bB]`_,+�U���f�S.- X�S^}��EvEfj_?W�/FbBZ�� v�+�k0�^}�12&3-4��- Y[|�|[Zgu6kZjdcZgY[|[Z��<|[f,Zcv � �^� �"!$#%#�5�5%5)�0�V�G�0�j�V�4�76 8`��#�9 �':%8%6�;V� � 6L�=<.#L� �<��#L� �L�c�?>c� �'>%; � �A@ �7@ �B�6� &

C ]�^}wbBY��D� v �E h�F�Fgi�WHGcmgmDGI�^} C -�J ZguA� P U C W Y[b��Ev&

Page 3: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

Y

��������� � ��������������

� � 3F!��6�,*a@5Ip!�7B��3�������������������������������������������������������������������� �

� � @ !"���O70%4/���������������������������������������������������������������������������� �G�&[h ~! �Zg_ <|[f��#"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"%"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"(GG�& G SVY[_)�L|[Zcv0Y[]`u&"'"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"%"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�")(G�& l C U+* _�]���fj| ����f����^Y�u.��"%"$"�"�"$"�"$"%"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"Fh�mG�&-, *VU+* _a]���fj| ����f����^Y[uA�."$"�"$"�"�"$"�"$"�"�"$"�"$"�"%"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"\h�GG�& n /;]D�LuA��f��4- ]���fj| C �Lf�� �VY[u.�)"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"%"$"�"$"ah0,

1 2)3 3T!"%�45��������������������������������������������������������������������������� �6�l�&[h ~! �Lb0f����0Ye]`uA�7"$"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"%"�"$"�"�"$"�"$"�"�"$"�"$" GVhl�&[h�&[h SVY[_2<|efT~! �Lb0f�� �0Y[]`uA�8"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"4GVhl�&[h�&[h�&[h C Z��Ef,~7 �<b0f�� �0Ye]`u��9":"$"�"�"$"�"$"�"%"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$" G�Gl�&[h�&[h�& G S^f�v4~7 �LbBf�� �0Ye]`uA�;":"�"�"$"�"$"�"�"$"�"$"%"�"$"�"�"$"�"$"�"�"$"�"$"�"�" G�Gl�&[h�& G <�f0 ^vM~7 �<b0f�� �0Ye]`u���"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"%"�"$"IG�Gl�& G /Ff>=<uLYev0Y[]`u ]��pv �Lf.? S.-@"�"$"�"$"�"�"$"�"$"�"%"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�Ggll�& G�&[h S^v0ZcvEf,X Zcb9Y[Z��<|ef��+"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"�"�"�"$"�"$"�"�"$"�"$"IGgll�& G�&[h�&[h Uz}%�f S��f���YA=Lf�b��B"'"$"�"$"�"�"$"�"$"�"%"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$" Ggll�& G�& G P u.���v�X ZcbBY[Z��2|ef��!"'"�"$"�"$"�"�"$"�"$"�"�"$"�"%"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�" G�,l�& G�& l C.�%�BD�E%���Lf���|[ZcbBZcv0Ye]`uA�F"'"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"%"$"�"�"$"�"$"�"�"$"�"$"�"�"$" G�,l�& G�&-, GIHJC%�.�2��f���|[ZcbBZcv0Y[]`uA�K"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"%"�"$"�" Ggnl�& G�& n D=�LD�G���f���|�ZcbBZcv0Ye]`uA��"$"$"�"�"$"�"$"%"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$" Ggnl�& G�&M( D=�%�JCNH ��f���|[ZcbBZcv0Y[]`uA�K"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"%"�"$"�" Ggnl�& G�&PO QJRISTD �UR��Lf���|[ZcbBZcv0Ye]`uA�F"'"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"%"$"�"�"$"�"$"�"�"$"�"$"�"�"$" Ggnl�& G�& i DD�NC*��f���|[ZcbBZcv0Y[]`uA��"$"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"%"�"$"�"$"�"�"$"�"$"�"�"$"�" GV(l�& G�& F �XW%QIYJZUR��Lf���|[ZcbBZcv0Ye]`uA�F"'"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"%"$"�"�"$"�"$"�"�"$"�"$"�"�"$" GV(l�& G�&[h�m P7��fju v0Y[=Lf�b��7"'"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"%"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$" GNOl�& G�&[hgh U���fM�?>��=� _�]��A�L|ef�":"$"�"%"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�" Ggil�& G�&[h�G o bB]�� f�� �0f��."$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"%"$"�"�"$"�"$"�"�"$"�"$"�Ggil�& G�&[hjl SJCXD$H��URA�%�2��f���|[ZcbBZcv0Ye]`u��B"'"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"%"$"�"�"$"�"$"�"�"$"�"$" G�Fl�& l S��f���YA=���Zcv0Y[]`uA�+"$"�"�"$"�"$"�"�"$"�"$"�"%"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"*G�Fl�& l�&[h C U+* S��f���YA=���Zcv0Ye]`uA�T"'"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"%"$"�"$"�"�"$"�"$"�" G�Fl�& l�& G *VU+* S�"f���Y[=���Zcv0Ye]`uA�7"$"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"%"�"$" lcml�& l�& l Q4fjZg|tU4Y[_�f C U\* S��f���YA=���Zcv0Ye]`u��)ZguA� C ]`_ '��v0Zcv0Ye]`uA�6"$"�"�" lVh

] � @�3�3�793&^`_#acbFd�e 793F!"�A�6%)Ip!�7E'F�A/ 3 ����������������������������������� 1c�,.&[h - ]���fj|tQ4fjZ��LY[uA�aZguA��/ �LY[|��<Y[u.�f">"�"�"$"%"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"�lgl,.& G C ]`_a_\ZguA�A�"� ]gb C ��f����^Y�u.�.S��f���YA=���Zcv0Ye]`u��F":"�"$"�"�"$"�"$"�"�"$"�"%"$"�"$"�"�"$"�"$"�"FlV(,.& l C ]`_a_\ZguA�A�"� ]gb\/;]D�LuA��f�� - ]���fj| C ��f����^Y�u.��"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"%"$"�"�")l�F,.&-, SVY[_)�L|[Zcv0Y[]`u C ]`_a_aZguA���F":"�"$"�"�"$"�"$"�"�"$"�"$"�"%"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"\,g(,.& n U bBZ�� f��MP uA�$�f�� v0Ye]`u C ]`_\_aZguA�A�X"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"%"$"7, i,.&M( P u vEf�b �sZ�� f vE]\v ��f / /�oGZ�� �cZ��gfh"g"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"%"�"$"�"�"$"�"$"!, i,.&PO i��L_aY[uLY �EvEbBZcv0Ye]`u C ]`_a_\ZguA�A�h"'"�"$"�"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"�"�"�"�"$"�"$"�"�"$"�"$"�"�")nVh,.& i jFv ��f�b�~Auwd^YebB]`uL_�fjuwv)X ZcbBY[Z��<|ef��L"'"�"$"�"$"�"�"$"�"$"�"�"$"�"$"�"%"$"�"�"$"�"$"�"�"$"�"$"�"�"$"znNO

k � @�3�3�793&^`_#acbFd�e �5%;!�Imln������������������������������������������������� k+o

p 7B��/970�c^M�6%+q�l 3 ���������������������������������������������������������������������sr;t

Page 4: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

Y[Y-nq�q��A35*a7 4 - # �F8`q5%;!�79��7B/97 ! 3 � 7 !hl # H � bKd�e ����������� r �

# �F8?8:%435* � 35*��#4 ��������������������������������������������������������������� r 1

� %)�O70%4��/B� � 35*��#4 ��������������������������������������������������������������������r ]

� 35*��#4 ������������������������������������������������������������������������������������r k

Page 5: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b hc� PRuwvEb0]��A�A� v0Ye]`u h

� � �����;������)����

� ������� Y��(Z �E}V_ �"]`|�Y���_�]��Lfj|.����f����gf�bz]gbBY��`Y[uLZcvEf�� � b0]`_�v ��f)b0f�fjuA�`Y[u�f�f�bBY[uA��kgb0fjY[_ <|[fj_�fju v0Zcv0Y[]`u�ZguA�f0 ^vEfju��0Ye]`u ]�� C -4J �����2ktv ��fa]gbBY �`Y�uLZg|#/ / /�WB�<Z��Ef�� _�]���fj| � ��f�� �gf�b ��f�dgfj|e]��f�� Zcv C -�J��� ��� ����������$&U���f��`�'����� Lb0]��Ef�� v ZgY[_2� Zcv v �Lf���f�dgfj|e]�2_�fju v ]��4Z��Ev0ZcvEf W ]�� W v ��f W Zcb0v2�0}^_ ��]`|[Y���_�]���fj| � ��f�� �gf�bjk ��f W�0Y �`u�f��\vE] ��fMZ�A2|[Y���Z��<|ef4Y�u�vEf����LuL]`|e]��g}avEbBZguA� � f�b Lb0]��Ef�� v ��� YevAY��AZ��;fj|[|��EvEb �A� v ��b0f��6kw]��fju6k �Lf0 �Y �<|[f4ZguA���]���L_�fjuwvEf�� 2|[Zcv$� ]gb9_ � ]gb(_�]���fj|%� ��f�� �VY[u.��k`Zgu�� Y �tb0]��'�A�Ev Zgu��)��|[]D�EfzvE] Y[u��A�A�EvEbBY�Zg|D�E}��EvEfj_2�0�Ev0ZguA�LZcb �A��"!#!#$%'&(&)�$&

X(f�b��BYe]`u h�]�� � �������4�<Z��0Y���Zg|�|e} Y[_2<|efj_�fjuwv �8/ /�/�WB�<Z��0f�� �E}V_ ��]`|[Y � _a]���fj| ����f����^Y[uA�.&aX(f�b��0Ye]`u�G]�� �`�'����� q � �'�����.@ Y[u v ��f � ]`|[|e]*�MY[u.�wx�Y[uA�Lf�bBYev �TZg|[|Gv ��f2� �LuA� v0Y[]`uLZg|[Yev0Yef��F]��;v ��f2LbBf�d^Ye]D����dgf�b �0Ye]`u6kpZguA�f0 ^vEfju�� v �Lfj_ Y�u4�Ef�dgf�b9Zg|3�<Yeb0f�� v0Ye]`uA�+�"!#!#$,-&/.0�$& U���f _aZgY[u u�]=dgfj|ev{} Y[u��`�'�����[email protected]��Mv �Lf Y[uwvEf�gbBZcv0Ye]`u ]��_�]���fj| ����f����^Y[uA�rvEf����LuLY21%��f��)�<Z��0f���]`u <b0]��]D�0Yev0Ye]`uLZg| �0Zcv0Y�� =<Z��<Y[|[Y[v } q SJi(U�x3�54�!#!768�(�)�$& SJi(U�WB�<Z��0f��_�]���fj|?����f����^Y[uA�5Y � ��Lb0b0fjuwv0|e}afju��E]=}VY[u.�5Z � �.���Ev0Zguwv0Y[Zg|?� �A�� f����)Y[u��0f�dgf�bBZg|6Y[uA�A���EvEbBY[Zg| =<fj|��A��kVZguA��]��fjuA��. uLf9� b0f��0fjZcb���� �LYeb0f�� v0Y[]`uA�&;/ /�/�WB�<Z��0f�� Zgu�� SJi(U�WB�2Z��Ef�� _a]���fj| ����f����^Y[uA��Zcb0f ]�� vEfju Z��<|[f,vE]*�0]`|edgf�LY�:�f�b0fjuwv���|[Z�� �Ef��M]�� LbB]��<|efj_2��k�ZguA����Zgu v ��f�b0f� ]gb0f ��f(�Ef�fju Z���� ]`_ <|efj_afju v0Zcb0} vEf�� �LuLY�1���f��&

S^v0ZcbBv0Y[u.��� b0]`_ � �������A@Lk*�;f;ZcbBf�Zg| �E]�Z���]�<v0Y[u.�TZ�u�f9� ��f�dgfj|e]�2_�fju v(ZguA� |[Y�� fju��Efz_�]���fj| & �`�'�����A@�Y���LY��EvEb9Y ����vEf��;��Yev �\Zgu�j��fju2S^]D�Lb�� fM|[Y�� fju��Ef q �Ef�f � �w� �"!$#�#�5�5%5)�7:���6c�6��:c���<�D6z� : �=<�x9k�v �<Zcv;Zg|[|[]/� �;Zgu }g]`uLfY[uwvEf�b0f��EvEf�� vE]4� bBf�fj|e} ���Efav ��favE]^]`|AZgu��rvE]�<ZcbBv0Y���Y <ZcvEfaY[u Yev �(��f�dgfj|e]�2_�fju v& U���faZgY�_ ]���v ��f2� �������j��fju2S^]D��b � f LbB]�� f�� v4Y��;vE] LbB]=dVY���fFvE]�v ��f _�]��Lfj| � ��f�� �VY[u.�2� ]`_\_ �Lu<Yev }�Z)� ]`_\_�]`u <|[Zcv$� ]gbB_ � ]gb)v ��fb0f��EfjZcb�� �6k"v ��f Y[_2<|efj_�fjuwv0Zcv0Ye]`u6k<Zgu�� v ��f)� ]`_ <ZcbBY��0]`u ]�� u�f9� �0}^_ ��]`|[Y�� _�]���fj| � ��f�� �VY[u.�.vEf����Lu<Y�1%�Lf��&SVY[uA� f v ��f b0fj|[fjZ��Ef ]�� � �������.@Lk�v ��f � �'����� vEfjZg_ �LZ���b0f�� fjYedgf�� � ]���f � ]`uwvEbBY ���Lv0Ye]`uA�"� ]gb �LY>:"f�b0fjuwv�<ZcbBv �]��4v ��f*�E}��0vEfj_ & S^f�dgf�bBZg|zb0f��EfjZcb�� ��Y[uA�Ev0Yev �LvEf��,ZguA��� ]`_a_�f�b���Y[Zg| � ]`_ <ZguLY[f�� �LZ=dgf.f0 �Lb0f���� Y[uwvEf�b0f��Ev Y[u� ]`|[|[Z���]gbBZcv0Y[uA��vE]av ��f(��f�dgfj|e]�2_�fju vM]��3� �'�����'&

U��Lf,_aZgY[u � fjZcv ��b0f��4]��0� �������.Zcb0f v ��f � ]`|[|[]/�MY[uA���?A@=BDCFEHG)I>J(CDK�L>I>G)I>M*N0O � �������5Zg|[|e]*� � � ]gbAv �Lf4b0fLb0f��0fju v0Zcv0Ye]`u.]�� �E}VuA����bB]`u�]D�A� ZguA�.Z��E}VuA����bB]`u�]D�A�7=2uLYevEf

�Ev0ZcvEf��0}��EvEfj_I��ktZguA��� ]gb,v ��faZguLZg|[}��0Y ��]�� �$�f���YA=���Zcv0Y[]`uA�Tf0 �<b0f�� �Ef��rY[u C ]`_2���v0Zcv0Ye]`urU b0f�f *t]��`Y��q C U+*GxtZgu���*tY[u�fjZcb(U fj_ �]gbBZg|J*O]��`Y�� q *VU+*Gx9kD�A�0Y[u.�6/ / /MWB�2Z��Ef��aZguA�aSJi(U�WB�2Z��Ef���_�]���fj|�����f����^Y[uA�vEf����Lu<Y�1%�Lf��&QP�f���bBY��0v0Y���6Zcb0fAZ=d�ZgY[|�Z��<|ef � ]gbtZ����LY[f�d^Y[uA�)f9RI��YefjuA� } ZguA� <ZcbBv0Y[Zg|[|e}�� ]`u vEb0]`|�|[Y[u.��v ��f �0v0ZcvEff0 �2|e]D�0Ye]`u & U ��f Y[u vEf�b9Z�� v0Ye]`uS�MYev ��v ��f �A�Ef�b���Zgu ��f ��Zcb0bBYef�� ]`uT�MYev � Z5vEf0 Vv �LZg|OY[uwvEf�b �sZ�� fgk<Z����;fj|[|Z��MY[u �2Zcv ��� _a]���f�&?VUXW9EZYDI>G)M*EHG)BDWHM(O i �E]�� v[��Zcb0f Zcb�� �LYevEf�� v ��bBf4�LZ��I�"f�fju ��f>=<u�f�� & U���f��<Y�:"f�bBfju v2� ]`_ �]`u�fjuwv ��ZguA�

� �<uA� v0Ye]`uLZg|[Y[v0Yef��F]�� � �'�������LZ=dgfI��f�fjurY��E]`|[ZcvEf�� ZguA� �Ef<ZcbBZcvEf�� Y[ur_�]��A�L|ef���& P u vEf�b�� Z�� f�� �"f�v\�zf�fju_�]��A�L|ef��"�LZ=dgf ��f�fju Lb0]�d^Y ��f�� & U��LY �zbBf��A�A� f��)v ��f fH:"]gb0v�u�f�f���f�� vE]\_a]��LY�� }�ZguA� f0 ^vEfju�� � ������� &?^]�BFK�L>I>G\_`J(abG)YDMcI>dfeDL>M*dfM/CgG)K�G)I>J(ChO � ������� Y��f�4bBYevEvEfjuKY[u i�<TS^P C k;Y��ao�j,S^Pji � ]`_2<|[Y[Zguwv�k)ZguA�

�LZ�����f�fju4��f���.���gf����MYev � o ��bBY � }.Y[u ]gb���f�b4vE]*��f�vEf�� vF_afj_�]gb0} |efjZ����&�?���b0v ��f�bB_a]gb0fgkLv ��f)�E}��0vEfj_� ]��Lf Y���v ��]gb0]D�A�D�L|e}�� ]`_\_�fju vEf�� & � ���������A�Ef��)v ��f(�0v0ZcvEf ]��pv ��f,Zcb0v+/ / / <Z�� �cZ��gf �Lf�dgfj|e]��f�� ZcvC ]`|e]gbBZ��L]IJ�u<Yedgf�b��0Yev{}gk<ZguA��Lb0]=dVY���f��MZ �gfju�f�bBZg| Y[u vEf�b�� Z�� f � ]gbF|[Y[u.�VY[u.�k�MYev � �Ev0ZcvEf W ]��Av ��f W Zcb0vTS i(U�E]`|edgf�b���& U��LY��z_aZ��gf�� �`�'�����5dgf�b0}ab0]��'�A�Ev�k�"]gbBv0Z��<|efgk f9R���Yefju v�k�ZguA�.fjZ��E}avE] �Lu���f�b��Ev0ZguA�2�w}a]gv �Lf�b�f�]�<|ef v �LZgu v �Lf ��f�dgfj|e]��f�b��&

U��LY��"�L]���L_afju v4Y�� �EvEb��A� v ��bBf�� Z���� ]`|[|e]/� �&? PRu C �LZ�LvEf�b GTl U3��vE]gbBY[Zg|�m k'<Z��gf)G;�zf �`Yedgf Zgu Y[u vEbB]��A��� v0Ye]`u vE]\v ��f)�A�0Z��gf ]��pv �Lf _aZgY[u � �Lu�� v0Ye]`uVWZg|[Yev0Yef��4]�� � �������'&? PRu C �LZ�LvEf�b�l�l S^}^uwv0Z� gm kA<Z��gf GVhb�;f ��f>=2u�f v ��f(�E}Vu v0Z� ]��Gv ��f,Y[uA���v)|[Zgu.�D�LZ��gf ]�� � �������'&? PRu C �LZ�LvEf�b�,nl Q �<uLuLY[u.� < �"S.- X Y[uwvEf�bBZ�� v0Yedgfj|e}=m k 2Z��gf l�G v ��f � ]`_a_aZguA����]��Mv ��f Y�u vEf�bBZ�� v0Y[]`u

� ��fj|[|6ZcbBf ��f�� � bBY��"f�� &? PRu C �LZ�LvEf�b�n�l Q �LuLu<Y[u.�&< �2SA- X �<Zcv ���om kA<Z��gf ngi;�zf �Lf>=<u�fTv ��f(�<Zcv � � _�]���f ]��3�`�'����� &

�`�'������Y��4ZjdcZgY[|[Z��2|ef,Zcv � �w� �"!$#�#��^�����<�;�B���"���;�B���2�(�0���'&

Page 6: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| G

� � � ����#����

P u v �LY �2���LZ�<vEf�b �;f��`Yedgf Z � �L]gb0v\Y[uwvEb0]��A�A� v0Ye]`u vE] v ��f��A�BZ��gf ]�� v ��f _aZgY[u � �LuA� v0Ye]`u<Zg|[Yev0Yef��5]���`�'����� &GPRu S^f�� v0Ye]`u�G�&[h3l ~! �Zg_ <|[f�� m k%2Z��gf�G'�zf���f�� � bBY ��f)v ��fFY[u.��Lv |[Zgu.�D�LZ��gf�]�� �`�'����� �w} <b0f��Efjuwv0Y[u.��E]`_�f�f0 �Zg_ <|ef��,]�� � ������� _�]���fj|��&�S^f�� v0Ye]`u G�& G�l SVY�_ �L|�Zcv0Ye]`u m k?<Z��gf ( � ��]*� �(��]*��v ��f2�A�Ef�b(��Zgu �gf�v� Zg_\Y[|[Y[Zcbb�MY[v � v ��f2��f��LZjdVYe]gb,]��)Z � �'����� _a]���fj|0�^} f0 �2|e]gbBY[u.� Yev �("]D���0Y �<|ef f0 Vf����v0Ye]`uA�& S^f�� v0Ye]`u�G�& ll C U+*r_�]���fj| ����f����^Y�u.��m k.<Z��gf�h�m5ZguA� S^f�� v0Ye]`u G�&-,�l *VU+*r_�]���fj|'� ��f�� �VY[u.��m k.2Z��gf5h�G �`Yedgf Zgu�]=dgf�bBd^Yef9�]���/ / /�WB�<Z��Ef�� _�]���fj|0���Lf�� �VY[u.��k � �LY�|ef5S^f�� v0Y[]`u�G�& n l /;]D�Lu���f�� - ]���fj| C ��f����^Y[uA��m k 2Z��gf h0,*<b0f��Efjuwv �SJi(U�WB�<Z��0f�� _�]���fj| ���Lf�� �VY[u.�\Y[u � �'�����'&��� � > 4 %48`q�/0�A1

P u v �LY��)�Ef�� v0Ye]`u �zf ��f���� bBY ��f\v ��f Y[u.'��v |[ZguA�D�LZ��gf.]�� �`�'����� �^} Lb0f��0fju v0Y[uA�4�E]`_�f f0 �Zg_ <|ef�� ]���`�'����� _�]���fj|��&Ki � ]`_ <|ef�vEf ��f�� � b9Y Lv0Ye]`u ]���v �Lf � ������� |[ZguA�D�LZ��gf ��Zgu ��f � ]D�LuA� Y�u C �LZ�<vEf�bGl l S^}^uwv0Z� gm k<Z��gf)GVh�&

U��LfzY[u.'��vO|[Zgu.�D�LZ��gfz]��.�`�'����� Y�� �Lf��0Y �`u�f�� vE]FZg|[|[]/� � ]gbpv ��f ��f���� bBY Lv0Ye]`u,]��B?pY�uLYevEf;S^v0ZcvEf"- Z����LY[uLf��q ? S.- � b0]`_u�]*�K]`u"x � �LY ����bBZguA�gf � b0]`_ � ]`_ 2|ef�vEfj|e}2�E}VuA���Lb0]`u�]D�A�(vE] � ]`_ <|[f�vEfj|e}�Z��E}^u�����b0]`uL]D�A��kVZguA�� bB]`_ v ��f �Lf�v0ZgY[|ef���vE],v �LfMZ����EvEbBZ�� v&�jTu�f���ZguI� "f���Y�� }5Z(�E}��EvEfj_Z��zZ(�E}VuA���Lb0]`u�]D�A� - fjZg|e}�_aZ�� �LY[u�fgkw]gbZ���Zgu Z��E}VuA����bB]`u�]D�A�MuLf�v[�;]gb � ]��(u�]`uA��f�vEf�b9_aY[uLY��0v0Y���Lb0]�� f�� �Ef��&)U���f |[Zgu.�D�LZ��gf(<b0]=dVY���f�� � ]gbF_�]����L|[Zcb�LYef�bBZcb ���LY���Zg| ��f�� � bBY�Lv0Ye]`uA��kLZgu���� ]gbMv ��f)��f>=<uLY[v0Ye]`u ]��(b0f��A�BZ��<|ef � ]`_ �]`u�fjuwv �&�SVY�uA� f YevFY��4Y[uwvEfjuA��f�� vE]��f�� � bBY��"f&=<u<YevEf2�Ev0ZcvEf._\Z����LY[uLf���ktv ��f�]`u<|e} �<Zcv0Z v }��f�� Y[u v ��f.|[Zgu.�D�LZ��gf\ZcbBf =<uLYevEf5]`u�f�� y4��]w]`|[fjZguA��k� ��Zg|[Zcb���ZguA� = Vf�� Zcb0bBZ=}���&;S^v0Zcv0Y��(�<Zcv0Z�v }��f�����Zgu Zg|��0] �"f(� ]`u��EvEb��A� vEf�� &

U��Lf(LbBY[_\Zcb0}I��Lb �]D�Ef ]��Gv ��f � ��������Y[uA���v)Y��)vE]*��f�� � bBY ��f v ��f vEbBZguA�0Yev0Y[]`u b0fj|[Zcv0Ye]`u ]��Gv ��f ? S.-��v �LY��Ab0fj|[Zcv0Ye]`u2�Lf�� � bBY ��f��(v ��f�d�Zg|�Y��5f�dg]`|���v0Ye]`u�� ]��6v ��f �0v0ZcvEf�]���v ��f�?(SA- &wPRu �gfjuLf�bBZg|�kVZgu } LbB]�"]D�BYev0Ye]`uLZg|f0 �<b0f�� �0Ye]`u&Y[uKv ��f�Lb0]��]D�0Y[v0Ye]`uLZg|���Zg|���<|��A�*��Zgu �"f��A�Ef�� vE] ��f>=<uLf v ��f vEbBZguA�BYev0Ye]`uKb0fj|[Zcv0Ye]`u & U �LY��Lb0]�d^Y��Lf��MZ2�gbBfjZcv���fjZg|t]�� �Lf0 �Y �<Y[|[Y[v }gkLZguA� ZcvMv ��f)�0Zg_�f v0Y�_�f ZI� f�bBv0ZgY[u��LZguA�gf�b�]�� Y[u�� ]`uA�0Y��EvEfju�� }�&�?�]gbf0 VZg_2<|efgk�v ��f LbBf��EfjuA� f ]�� Z |e]��`Y ��Zg|�� ]`u vEb9Z��LY�� v0Ye]`u ��Zgu b0f�� �<|evaY[u Z �LfjZ��L|e]�� � y�Z �Ev0ZcvEf ]gb��Ev0ZcvEf���MYev �.u�] � �A�� f����E]gb�& U��LY � ��Zgu._aZ��gf �E]`_�f��$�f���YA=���Zcv0Ye]`u��(d�Z���L]D�A�0|e}5vEb���fgk^ZguA�\_\Z��gf��Av ��f���f�� � bBY�Lv0Ye]`u�LuLY[_2<|efj_�fjuwv0Z��<|ef�&�� �<Y[|ef5v ��fa_�]���fj| ���Lf�� �VY[u.� LbB]�� f�� � ��Zgu ��f ���Ef��rvE] ���Lf�� � � ]gb ��fjZ��L|e]�� ����ktY[v,Y����f��Ev�vE] Z=dg]`Y�� v ��f <b0]��<|efj_ � �Lfju "]D���0Y �<|ef*�^}��A�BY[u.�rZrb0f��EvEb9Y�� vEf�� ��f�� � b9Y Lv0Ye]`u �Ev{}^|[f�& U���f � ��������E}��EvEfj_ � �AA�]gb0v �Fv �LY�� �^}4LbB]=dVY��LY[u.� Z <Zcb9Zg|[|efj| W Z�� �BY �`uL_�fjuwv �E}^uwv0Z� ?&\U���f �Efj_aZguwv0Y��� ]��;Z�� �BY �`uL_�fjuwvY[u �`�'����� Y��I�BY[_aY[|[Zcb\vE] v �LZcv�]��(�0Y[uA�`|ef Z�� �0Y��`uL_�fjuwv*�LZcv0Z �L]*� |[ZguA�D�LZ��gf�& /;} � ��f�� �VY[u.��Lb0]��gbBZg_I�� ]gba_)�L|ev0Y�<|ef2<Zcb9Zg|[|efj|;Z�� �0Y �`uL_afju v � vE] v ��f �0Zg_�f dcZcbBY[Z��<|efgk ��Yeb ��L|[Zcb5Z�� �0Y �`uL_afju v ��kzZguA� v }�"f�f�b0b0]gb ��kv ��f Y[uwvEf�b LbBf�vEf�b�Y[uA����b0f��;v �LZcv�Z2Lb0]��gbBZg_ ���0Y[u.�5]`uL|e}�v ��f Z����0Y �`uL_�fjuwvM_�f�� �LZguLY��B_ Y��)Y[_ 2|efj_�fjuwv0Z��<|ef�&C ]`uA�Ef 1���fjuwv0|e}gkFv �LY���� bBZ��`_afju v ]�� v ��fr|[Zgu.�D�LZ��gf ��Zgu ��f d^Yef9�;f��&Z�� Z ��f�� � bBY�Lv0Ye]`u |[Zgu.�D�LZ��gfgkF]gb ZLb0]��gbBZg_\_aY[u.�a|[ZguA�D�LZ��gf�&

C ]`u��0Y���f�b)v ��f � ]`|[|e]*�MY[u.� �0Y�_ <|ef Lb0]��gb9Zg_ Y[u v ��f � �������.|[Zgu.�D�<Z��gf�&�BWVQIYJZUR � >�����UCgH �.6��`�A6<��� !�:�:�;%6�>c������.>`��6 !� `�.6�> 8�����w�6�������C����BD�E%����"�c���j���.>`��6�� !��&�.6�> 8������6��w���j���.>`��6�� !��D� >���6���.>`�.6��&��6�>D8��! ��.6��`�A6<�����#" !w�6�$���

" !� g�.6�> 8�����^���������6<��>��%�

U���f)�$<Z�� f ]�� �0v0ZcvEf��M]��(v ��ff? S.- Y�����f�vEf�b9_aY[u�f����w} v ��f)��f���|[ZcbBZcv0Ye]`u��4]��(v ��f)�Ev0ZcvEf dcZcbBY[Z��2|ef�� qsY[u v ��fZ���]=dgf4f0 �Zg_ <|ef��.6��`��6L���,ZguA� ���.>`��6Vx &GU���f�d�Zcb9Y[Z��<|ef;��6��`�A6<���,Y �3�Lf���|[Zcb0f��5vE] ��f�]��pq Lb0f��Lf>=<u�f��2xtv }��fA:�:�; 6�>�� &�U��LY��)_�fjZgu��Mv �LZcvFYev ��Zgu Z�� � �L_af,v ��f�qsY�u vEf�gf�b x4dcZg|���f��'&�ZguA�("D&)U��Lf,d�Zcb9Y[Z��<|ef����.>`�.6\Y���Z� ��Zg|[Zcb d�ZcbBY�Z��<|efgk � �<Y���� ��Zgu v0Z��gf\v ��f��E}^_ ��]`|[Y�� dcZg|���f�� �.6�> 8�� ]gb)^�6�$� &\U���f � ]`|[|e]*�MY[u.� Z�� �BY �`uL_�fjuwv�Ef�v �4v �Lf,Y[uLYev0Y[Zg|2dcZg|���fT]�� v �Lf d�ZcbBY�Z��<|ef5���A>`��65vE]\��6�>D8�� &GU ��f Y[uLYev0Y[Zg|2dcZg|���f ]��p��6��g��6<���aY��"� ]`_2<|ef�vEfj|e}�LuA�$�f���YA=<f��6k(Y & f�& Yev ��Zgu �"f�fjYev ��f�b*& ]gb+" & U���f�vEbBZguA�0Y[v0Ye]`u b0fj|[Zcv0Ye]`u ]��Mv ��f ? S.-NY � f0 �Lb0f����Ef����w}

Page 7: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| l

��f>=<uLY�u.� v ��f�d�Zg| ��f5]��;dcZcbBY[Z��2|ef��TY[u v ��fau�f0 Vv(�Ev0ZcvEf qsYB& f�&aZ�� vEf�b,fjZ�� � vEb9ZguA�0Yev0Ye]`u"x9k �`Yedgfjurv ��f�dcZg|���f�]��d�Zcb9Y[Z��<|ef��zY[uav ��f����b0b0fjuwv �0v0ZcvEf��TqsYB& f�& �"f� ]gb0f�v ��fMvEbBZgu��0Yev0Ye]`u2x &(U��Lf �D>L��6 �0f�`_�fju v �Ef�v �;v ��fFu�f0 ^vzd�Zg| ��f]���v �Lf d�ZcbBY�Z��<|ef ���A>`��6 vE]rv �Lf d�Zg|��Lf ^�6�$�KqsZ�� vEf�b\v �Lf � ]`|��L_au2x Y ��Yev � ���b0b0fjuwv�dcZg|���f Y�� ��6�> 8�� ZguA���6��`�A6<��� Y���" qsY & f�&�vEb���f�x &6jTv ��f�b��MY��0f.q v ��f ")�"f� ]gb0f v ��f)� ]`| �L_au2x;v �Lf u�f0 VvFd�Zg|��Lf � ]gb ���.>`�.6���Zgu ��fZgu } Y[u�v ��f(�Ef�v' `�.6�> 8�����w�6�$� �A& U���fTdcZcbBY[Z��<|[f��.6��`��6L���\Y���u�]gv4Z�� �BY �`u�f�� & U��<Y��z_afjZguA�)v �LZcv)v ��f�bBf,Zcb0fu�](� ]`uA�EvEb9ZgY[u v � ]`u�Yev �Gd�Zg| ��f���k`ZguA�5v ���A�(Yev ��ZguaZ�� ���L_�f4Zguw} dcZg|���f�&p��6��`�A6<���,Y �Gv �%�A�(ZguI�LuA� ]`uA�EvEb9ZgY[u�f��Y[u.��Lv;vE]\v ��f �E}��EvEfj_ &U��Lf � ]`|[|e]/��Y[u.� Lb0]��gb9Zg_�Y[|�|��A�EvEbBZcvEf��4v ��f ��f>=2uLYev0Ye]`u ]��(bBf��A�0Z��<|ef,_a]��A�<|ef��MZguA� f0 �<b0f�� �0Ye]`u��&�P{vFY��Z._a]���fj| ]�� Z.v ��b0f�f)�<Yev��<Y�uLZcb0} � ]D�LuwvEf�b ��Y[b���LYev&MU ��f ]gb��Lf�b�]��A_a]��A�<|ef(��f>=<uLY[v0Ye]`uA�4Y[u v ��f Y[u.���v\=<|efY��4u�]gvMb0fj|ef�dcZgu v&�BWVQIYJZUR ��:g�^�V�.6`�

���6�;%;%���D>`�w� �

���� �

�JCgH �.>�;���6 !A:�:�; 6�>����C.��� D%E ��=����� �0�.>�;���6�� ! � &���A6�� � �0�.>�;���6�� ! � �E�A>�;���6 ,D�D>`�w� �

���� � � : 8 @��

QJRUSLD=�IR� >g�^����:c��� ! �&�A>%;c�A6� D� >`�w� �

���� �

�BWVQIYJZUR � >�����JCgH"�c� & ! �D:g�w����6 �

��D6�;�;%� "�� �

"�c� " ! �D:g�w����6 ���D6�;�;%� �����&z�0� >g�^� �

�:c����� �

"�c�.@ ! �D:g�w����6 ���D6�;�;%� ���� " �0� >g�^� �

�:c����� �

U���f)? S.-�Y�� ��f>=<u�f�� �^} Y[uA�Ev0Zguwv0Y[Zcv0Y[u.� v ��b0f�f v0Y�_�f��)v ��f,_�]��A�L|[f�v{}%�f5�D:c�^�V�.6 ����6�;�; Y�u v ��f,_�]��A�L|ef� >�����kQ�MYev � v �Lf\uLZg_�f��)"�c� &<k ��c� "�ZguA� ��c�.@ b0f��$�f�� v0Yedgfj|e}�& U��Lf ��:g�^�V�.6`�

���6�;%; _�]����L|ef2�LZ�� ]`u�f

� ]gb9_aZg|�<Zcb9Zg_�f�vEf�b � >`�w� �����?& P u v ��f Y[uA�Ev0Zgu�� f "�c��&Lk;v �LY�� 2ZcbBZg_�f�vEf�b Y�� �`Yedgfju v ��f Z�� v �LZg|Md�Zg| ��f

"D& P u v ��f�Y[uA�Ev0ZguA� f ���� "`k � >g�^�����=� Y�� �`Yedgfju v ��f d�Zg| ��f ]��Av ��f5f0 �LbBf�� �0Ye]`u+"�c��&A�B�D>`�^���

�:g���'&MU �LY��f0 �<b0f�� �0Ye]`u Y��)f�dcZg|��LZcvEf�� Y[u v ��f)� ]`u vEf0 VvF]��(v ��fF�?>V��� _�]����L|ef�& P�]/�;f�dgf�bjk6Zgu f0 �LbBf�� �0Ye]`u ]��(v �Lf(� ]gb9_

��� "���� ��fju�]gvEf�� � ]`_ �]`u�fjuwv � ��� ]��M_�]��A�L|ef ��� �ek � �A�Ev Z�� Y��)v ��f�_a]��A�<|ef ��� �Q�;f�b0f Z �<Zcv0Z4�EvEb �A� v ��b0f�Y[uZ �Ev0ZguA�LZcb �4<b0]��gbBZg_a_aY�u.��|�Zgu.�D�LZ��gf�&3PMfjuA� fgktv ��f �D>`�^������� ]��z_a]��A�<|ef)���� "�Y��Tv �Lf.� >`�w� �

�:g�V� ]��_�]��A�L|ef'�����&A&

U��Lf*�gf�}g�;]gb�� � QURUSTD �UR�GY�� �A�Ef�� vE] Z�� �BY �`u�v ��f f0 �<b0f�� �0Ye]`u �A>%;c��6 � >`�w� ����� vE]rv ��f �E}^_ ��]`|�D>`�^���

�:g���'& i ��f>=<u<Yev0Ye]`u ��Zgu���fav ��]D�.�D�wv ]��MZ�� Z dcZcbBY[Z��2|eff�MYev � d�Zg| ��f q � �LuA� v0Ye]`uLZg|�|e}�x��Lf"fju��LY[u.�]`u v ��f2��Lb0b0fjuwv d�Zg|��Lf��T]��;]gv �Lf�b,d�Zcb9Y[Z��<|ef��&�U��Lf2�0Zg_�f�fH:�f�� v � ]D�L|�� �<Zjdgf2��f�fjur]��Lv0ZgY�u�f��rZ��(� ]`|[|e]*� �qsu�]gv0Y�� f v �LZcv)v ��f� ������������dcZg|���f ]��pv ��f,dcZcbBY[Z��<|[fTY �)Z�� �0Y �`u�f��Ok�bBZcv ��f�b4v �LZgu v ��f��������;d�Zg| ��f�& x9�

�UCgH � >g�^����:c��� ! A:�:�;%6�>����

C����BD�E%�� >g�^����:c��� ! �&�A>%;c�A6� D� >`�w� �

���� �

/Ff>=<u�f�� �E}V_ ��]`|�� ��]�u�]gv)bBf 1%�LY[b0f�Y[uwvEb0]��A�A��Y[uA� Z�u�f9�&dcZcbBY[Z��<|efgk�ZguA� ��fju�� f(��]�u�]gv)Y[uA� b0fjZ��EfTv ��f(�0v0ZcvEf�$<Z�� f�]��zv ��f ? S.- &mjTu v �Lf ]gv �Lf�b(�LZguA�6kOYevTY��Tu�]gv �]D� �0Y��<|ef,vE] Z�� �BY �`u vE] Z ��f>=<u�f����E}V_ ��]`|GZ�d�Zg| ��fu�]`uVW ��f�vEf�b9_aY[uLY��0v0Y���Zg|[|e}�&�iFu�]gv ��f�b �LY>:"f�b0fju�� f �"f�v\�zf�fju ��f>=<u�f�� �0}^_ ��]`|�� ZguA�rdcZcbBY[Z��<|[f�� Y�� v �LZcv�� �LY[|efv ��f,v{}%�f,]��pd�Zcb9Y[Z��<|ef��)Y�� ��f���|[Zcb0f�� Z <bBYe]gbBY�k�� ]gb ��f>=<u<Yev0Ye]`uA�zv �LY��4Y �)u�]gv4v ��f(��Z��Ef�&

U��Lf�LbBf�d^Ye]D��� f0 �Zg_ <|ef�� ��f���� bBY ��f��E}VuA� ��b0]`u�]D�A� �E}��EvEfj_2�jk � ��f�b0f�v ��f Z�� �0Y �`u<_�fju v � �Ev0ZcvEfj_afju v �Zcb0f v0Z��gfju&Y[uwvE] Z��� ]D�<u v Y[u <Zcb9Zg|[|efj|)ZguA� �0Y[_)�L|ev0Zgu�f�]D�A�B|e}�& � �'����� Zg|�|e]/� �\vE] _�]���fj|4Z��0}^uA� ��b0]`u�]D����E}��EvEfj_2�& PRv4Y�� �]D� �0Y��<|efMvE]���f>=<u�f Z � ]`|[|ef�� v0Y[]`u ]�� <Zcb9Zg|[|efj| Lb0]�� f�� �Ef���ko� ��]D�Ef,Z�� v0Ye]`uA�MZcb0f,Y[uwvEf�bB|efjZjdgf��Ok� ]`|�|e]/�MY�u.� Zgu Z��E}VuA���Lb0]`u�]D�A�,_a]���fj|G]�� � ]`uA���bBb0fjuA� }�&\U��<Y�� Y��(�A�0f� �L|3� ]gb ��f�� � b9Y �<Y[u.� � ]`_a_)�LuLY���Zcv0Y[]`uLb0]gvE]�� ]`|���kG]gb�Z��E}VuA����bB]`u�]D�A� ��Y[b���LYev ��kp]gb ]gv ��f�b �E}��0vEfj_2�'� ��]D�Ef.Z�� v0Y[]`uA�5Zcb0f.u�]gv �E}VuA���Lb0]`uLY���f�� qsY[uVW��|��A�LY�u.� �E}^u�����b0]`uL]D�A�"��Yeb���LY[v ��MYev � _�]gb0f v �LZgu ]`u�f(��|e]�� � b0f�`Y[]`u2x &

U��Lf � ]`|[|[]/�MY[uA�)<b0]��gbBZg_ b0f<b0f��Efjuwv �4Z�bBY[uA� ]��Gv ��bBf�f,Z��E}^u�����b0]`uL]D�A�4Y[uwdgf�b0v0Y[u.� �`ZcvEf���&�BWVQIYJZUR �=���.6`�^��6 � � ���%�^��� �

Page 8: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| ,

�JCgH:c���D�^��� !�:�:�;%6�>c���

C.��� D%E ��=����� � :c���D�^��� � !�� & ��A6�� � � :c���D�^��� � !����0�=���^�V����BWVQIYJZUR � >�����JCgH

<�>`��6 " !��V�.:L��6<�w� ���V�.6 �w�.6`� �Z<�>`��6��z� :g�V� �^�V� � �<�>`��6�@ !��V�.:L��6<�w� ���V�.6 �w�.6`� �Z<�>`��6 " � :g�V� �^�V� � �<�>`��6�� !��V�.:L��6<�w� ���V�.6 �w�.6`� �Z<�>`��6�@A� :g�V� �^�V� � �

iF_�]`u.�5Zg|[|�v ��fT_�]��A�L|ef��AY[uA�Ev0Zguwv0Y[ZcvEf��f��Yev �av ��f��V�.:L��6<�w���gf�}g�z]gb��Okw]`u�fTY��zu�]`uA��f�vEf�bB_\Y[uLY��Ev0Y ��Zg|[|e}����]D�0fju6k ZguA� v �LfaZ�� �0Y �`uL_afju v(�Ev0ZcvEfj_afju v �)��f���|[Zcb0f��rY�u v �<Zcv(Lb0]�� f�� � Zcb0faf0 Vf����vEf�� Y�u�<ZcbBZg|[|efj|B& PRv,Y��Y[_ <|�Y���Yevpv �LZcvAY �"Z �`YedgfjuadcZcbBY[Z��<|[f�Y �(u�]gvAZ�� �0Y��`u�f�� �w} v ��f�<b0]�� f�����k`v ��fjuaY[v �Gd�Zg|��Lf)b0fj_aZgY[uA� �<uA���LZguA�gf�� &/;f���Z��A�Ef v ��f ���L]`Y�� fT]��tv ��fTu�f0 Vv <b0]�� f����zvE]5f0 Vf����vEf,Y��;u�]`uVW ��f�vEf�b9_aY[uLY��0v0Y��ck v �LY � LbB]��gbBZg_ _�]���fj|��zv ��fbBY[u.��]��GY[uwdgf�b0vEf�b��4Y�uA��f�fjuA��fjuwv0|e}a]��pv ��f �$�f�f�� ]��Gv ��f �`ZcvEf��&

�rfabBfj_aZcb � v �LZcv v �Lf �0}��EvEfj_?Y��Tu�]gv � ]gb�� f�� vE] f�dgfjuwv �LZg|[|[}4���L]w]D�EfaZ �`Y[dgfju�Lb0]�� f�� �FvE] f0 ^f����vEf�&i � Z � ]`uA�Ef 1���fjuA� f�v ��f\]D��v$���vT]���Z �`Yedgfju �`ZcvEf\_\Zj} b0fj_aZgY[u � ]`u��Ev0Zgu v�k b0f�`Zcb��L|[f�� � ]���Yev � Y[u.��Lv& P u]gb���f�b vE]�� ]gb�� f.Z4�`Yedgfju Lb0]�� f�� � vE] f0 ^f���LvEf�Y[uB=<uLYevEfj|e} ]�� vEfjuOk8�;f���Zgu��A�Ef.Z�������� �����3��������������� �7&�i� ZgY[bBu�f�� � � ]`uA�EvEb9ZgY[u v b0f��EvEb9Y�� v � v ��f ZcvEvEfju v0Ye]`u ]��4v ��f _�]���fj| � ��f�� �gf�b.vE] ]`uL|e} v ��]D�0f�f0 Vf����v0Ye]`u�<Zcv ���Zg|e]`u.� � �LY ��� Z��`Y[dgfju�� ]gbB_)�L|[Z�Y��FvEb���f5Y[u =2uLYevEfj|e} ]�� vEfju &,~AZ�� � Lb0]�� f�� � �LZ��TZ �$�f���Y[Zg|tdcZcbBY[Z��2|ef)��Zg|�|ef���`�^�^�"���o< � �LY�� � Y�� " Y �pZgu�� ]`uL|e}�Y �tv �LZcv Lb0]�� f�� �4Y�����Lb0b0fjuwv0|e}\f0 Vf����v0Y[u.�.&/;} Z����LY[u.�5v ��f �Lf���|[ZcbBZcv0Ye]`u6�

SUCLD$H��UR.���� �w�^�"���D<vE] v ��f)_�]��A�L|ef��=���.6`�^��6 �"k*�;f"��Zgu5fH:"f�� v0Yedgfj|[} � ]gb�� f)f�dgf�b0}5Y[uA�Ev0Zgu�� fz]��t�=����6 �^��6 � vE] f0 ^f���LvEf4Y[u =<uLY[vEfj|e}]�� vEfju &

iFu Zg|[vEf�bBuLZcv0Yedgf vE]*�A�BY[u.� Lb0]�� f�� �Ef���vE]._a]���fj| Zgu Z��0}^uA� ��b0]`u�]D��� ��Yeb���<Yev4Y��4vE] Zg|[|e]*� Zg|[| �`ZcvEf��FvE]f0 ^f���LvEf(�0Y[_)�L|ev0Zgu�f�]D�A�B|e}gkD����vzvE]�Zg|[|e]/� fjZ���� �`ZcvEfTvE] ����]^]D�Ef u�]`uVW �Lf�vEf�bB_aY[uLY �Ev0Y���Zg|[|e} vE]5b0f W f�d�Zg| �LZcvEf Yev �]D��v$���v)]gbMvE]2�gf�f v ��f(�BZg_�f,]D��v$��Lv;dcZg|���f�&�S��A��� Z�_a]���fj|�]��Gv ��f,Y�u dgf�b0vEf�bMbBY[u.�3�;]D�L|�� |e]^]��.|[Y��gf v ��f� ]`|�|e]/�MY�u.���

�BWVQIYJZUR � >�����JCgH

<�>`��6 " ! �=���.6`�^��6 � ��<.>g�.6��A�7:c��� �w��� � �<�>`��6�@ ! �=���.6`�^��6 � ��<.>g�.6�@ �7:c��� �w��� � �<�>`��6�� ! �=���.6`�^��6 � ��<.>g�.6 "t�7:c��� �w��� � �

���UR��� CUE CgS <.>`��6 "t�7:g�V� � � CUE CgS��\<�>`�.6�" � :g��� �

�BWVQIYJZUR �=���.6`�^��6 � � ���%�^��� ��JCgH

:c���D�^��� !�:�:�;%6�>c���C.��� D%E ����"�c��� :g�V� �w��� � ! � &����6��w��� :g�V� �w��� � ! ���E�����w���K�w����:g� :c��� �w�����

U���fT�^����:g� ]��f�bBZcvE]gb�q �Ef�v��LuLYe]`u2x � ]^f�b�� f��TYev �4Zcb �D�<_�fju v ��vE]��BY[u.�`|ef�vE]`u �0f�v ��Z���u�f�� f�� �0Zcb0}�&)U����A��k<v ��fu�f0 Vv :c��� �w���\]��pfjZ������`ZcvEf ��Zgu ��f fjYev �Lf�b4Yev �����b0bBfju v :g�V� �^�V�"kV]gb4v ��f u�f�`Zcv0Y[]`u ]��(Yev �"���b0b0fjuwvT���%�^�V�y fjZ�� � �`ZcvEf ��Zgu ���L]w]D�Ef5u�]`uVW �Lf�vEf�bB_aY[uLY �Ev0Y���Zg|[|e} � ��f�v ��f�b�vE]*�Lfj|[Zj} ]gbTu�]gv&\i���Z\b0f�� �L|[v�k<v ��f u%�L_ ��f�b]�� �]D� �BY �<|ef vEbBZguA�0Yev0Y[]`uA� � b0]`_ Z �`Yedgfju �0v0ZcvEfI��Zgu���f5Z��(G�� k � ��f�b0f�rY��Fv ��fau��L_ ��f�bT]�� �`ZcvEf���&5U �LY���E]`_�f�v0Y[_af�� q ����v4uL]gvMZg|>��Zj}��9x�_aZ��gf���Yev4_�]gb0f f0 ��fjuA�0Yedgf vE]abBfLb0f��Efjuwv4v ��f vEbBZgu��0Yev0Ye]`u b0fj|�Zcv0Ye]`u &

U��Lf � ]`|[|e]/��Y[u.� Lb0]��gb9Zg_ Y�� Zgu�]gv ��f�b f0 VZg_2<|ef ]��aZ��0}^uA� ��b0]`u�]D��� _�]���fj| & PRv4�A�0f�� Z d�ZcbBY�Z��<|ef�Efj_aZ���L]gb0f5vE] Y[_ <|efj_afju vT_ �Lv �LZg|pf0 ���|����0Ye]`u4�"f�v\�zf�fju v[�;] Z��E}^u�����b0]`uL]D�A� Lb0]�� f�� �Ef��& ~AZ�����<b0]�� f����

Page 9: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| n

�LZ�� � ]D��b �Ev0ZcvEf����;��8�;%6<k%6c���.6`�2�=�D<2k �c�<�c�2�w� >%; ZguA�26��<�c�<���o<'& U ��f 6c���.6`�2�=�D< �Ev0ZcvEfMY�uA�LY���ZcvEf��Gv �LZcvAv ��fLb0]�� f�� � �;Zguwv �AvE] fjuwvEf�b;Yev � � bBYev0Y���Zg|<b0f�`Ye]`u &GP ��v ��fMdcZcbBY[Z��<|[f,��6��?>=� � : �.6,Y�� &Lk^Yev �g]^f��zvE] v ��f,�c�2���2�w� >�;�Ev0ZcvEfgkOZguA� �Ef�v � ��6��?>=� � : �.6\vE] " &6jTu f0 VY[v0Y[u.�.Y[v � � bBY[v0Y���Zg|tbBf�`Ye]`u6k"v ��f LbB]�� f�� � �Ef�v � ��6��?>�� � :`�.6\vE] &Z��`ZgY[u &

�BWVQIYJZUR � >�����JCgH ��6�� >�� � : ��6 !�:%:�; 6�>c� �

�V�.:�� " !�����:L��6<�^� �6��6`� ����6�� >�� � : ��6�� ��V�.:�� @ !�����:L��6<�^� �6��6`� ����6�� >�� � : ��6�� �

C.��� D%E ��=����� �j��6�� >�� � : ��6�� ! � &��

�BWVQIYJZUR ����6 ���j��6��?>=� � : �.6 ��JCgH ���A>g�.6 !� V��8.; 6 �46c���.6`�2�=�D<�� �c�<�c�2�w� >%;�� 6��<���2���o<�� �C.��� D%E ��=����� �j���A>g�.6�� ! � ��8.;%6���A6�� � �j���A>g�.6�� ! ��D>L��6���A>`��6 �D��8�;%6 ! ���8.;%6���6g�V�.6`�2���o<�� ����A>`��6 � 6g�V�.6`�2���o<� ��B��6�� >�� � : ��6 ! �c�<�c�2�w� >%;�����A>`��6 �D�c�<�c�<�^� >%; ! ����2�c�<�^�D>�;�� 6��L�c�2�=�D< ������A>`��6 � 6��L�c�<���D< ! ��8�;%6 �

" !r���.>`�.6��6L�D>V�%��A6�� � �j��6�� >�� � : ��6�� ! ��D>L��6���A>`��6 � 6g�V�.6`�2���o< ! " ����A>`��6 � 6��L�c�<���D< !+& �" ! ��6��?>=� � :`�.6��

6L�D>V�%�SJCLD'H��IRA����`�^�w�����o<

� ������� Zg|[|e]/� � vE]��$�f���Y � } v �Lf�? S.-,�<Yeb0f�� v0|e}rY[u vEf�bB_2� ]���Lb0]��]D�0Y[v0Ye]`uLZg| � ]gbB_)�L|[Z��& U ��f*�0f�v ]���]D� �0Y �<|[fFY[u<Yev0Y[Zg| �Ev0ZcvEf���Y �"�$�f���YA=Lf�� Z��MZ � ]gbB_)�L|[Z5Y[u v ��f(���bBb0fju v��0v0ZcvEf dcZcbBY[Z��<|ef���&#i �Ev0ZcvEf Y��)Y[uLYev0Y�Zg|2Y �Yev(�0Zcv0Y�� =Lf��Tv ��f � ]gbB_ �<|[Z�& U ��f5vEbBZguA�0Yev0Y[]`u bBfj|[Zcv0Ye]`urY�� �LYebBf�� v0|e}4�$�f���YA=<f�� Z�� Z Lb0]��]D�0Yev0Ye]`u<Zg| � ]gbB_)�L|[ZY[u.vEf�bB_2�z]��Ov ��f � � �������zZguA� ����� �(d�Zg| ��f��A]��tv ��f��0v0ZcvEfFdcZcbBY[Z��2|ef��&#i�uw}I���b0bBfju v �Ev0ZcvEf���u�f0 Vv �0v0ZcvEf�2ZgYebY��4Y[u v �Lf,vEbBZguA�0Y[v0Ye]`u�b0fj|[Zcv0Ye]`u Y�� ZguA� ]`u<|e}�Y�� Yev��0Zcv0Y � =Lf��)v ��f � ]gbB_)�L|[Z�&

U��Lf��Ef�v\�z] � �LuA� v0Ye]`u��zZcb0fTZ��� ]`_ <|�Y�� ��f����w}\v ��f � D=�TD$G��wZguA� � GIHJC%�A� �%�gf�}=�;]gb��A�&7i���Zgu�f0 VZg_ 2|efgk��f�b0f Y �)Z2��f�� � bBY�Lv0Ye]`u�]��Gv ��f v ��b0f�f Y�u dgf�b0vEf�bMbBY[u.� �A�0Y�u.�5]`uL|e}�GgH C �A��Zgu�� D �TD�G2�

�BWVQIYJZUR � >�����JCgH

<�>`��6 " ! �=���.6`�^��6 � ��<.>g�.6��A�7:c��� �w��� � �<�>`��6�@ ! �=���.6`�^��6 � ��<.>g�.6 "t�7:c��� �w��� � �<�>`��6�� ! �=���.6`�^��6 � ��<.>g�.6�@ �7:c��� �w��� � �

�BWVQIYJZUR �=���.6`�^��6 � � ���%�^��� ��JCgH

:c���D�^��� !�:�:�;%6�>c���D=�TD$G

:c���D�^����� &GIH C �A�

Page 10: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| (

�A6�� � � :c���D�^��� � ���E�����w�����a�A6�� � � :c���D�^��� �(� :c��� �w���i �� ]gb �LY[u.� vE]rv ��f GIHJC%�A� ��f���|[ZcbBZcv0Ye]`uOk � ]gb�fjZ���� Y[uwdgf�b0vEf�bjkzv ��f u�f0 Vv dcZg|���f ]���v ��f�:c��� �w��� Y�� f 1%�<Zg|fjYev ��f�b4vE]�v �Lf,u�f�`Zcv0Ye]`u ]��pv ��f �=���^�V�"kV]gb4vE]�v ��f(���b0bBfju v�dcZg|���fT]�� v �Lf :c���D�^���'&(U����A��k�Y[u�fH:�f�� v�k<fjZ�����`ZcvEf ��Zgu4����]^]D�Ef uL]`uVW ��f�vEf�bB_aY�uLY��Ev0Y���Zg|�|e}3� ��f�v ��f�b4]gbFu�]gv)vE]I��fj|�Zj}�&

J��0Y[u.��GIHJC%�.�.ZguA� D=�LD�G YevFY�� �]D� �BY �<|ef,vE] �$�f���Y � } Y[uLZ��L_\Y�� �0Y �2|ef8?(SA-���k � �Lf�b0f v �Lf)�Ef�vF]��zY�uLYev0Y[Zg|�Ev0ZcvEf��FY���fj_ Lv{}�]gb�v ��f vEbBZguA�BYev0Ye]`u b0fj|[Zcv0Y[]`u Y��)u�]gv4vE]gv0Zg|B&AU��LY��)_\Zj} b0f�� �L|[v�Y�u |e]��`Y���Zg|OZ�������b��LYev0Y[f��&

��� � 2 7B8 @�/0%;!670��3SVY�_ �L|�Zcv0Ye]`u ]�:"f�b��GvE] v ��f��A�Ef�bGv ��f"�]D� �0Y��<Y[|[Yev{}T]��2f0 �<|e]gbBY�u.��v �Lf""]D���0Y �<|efzf0 ^f���Lv0Ye]`uA�Mq ��� � ����� bB]`_u�]/� ]`u2xz]��GZ �`�'������_�]��Lfj| &GPRu v �<Y���;Z=}gk<v ��f(���Ef�b���Zgu �gf�v��sZg_aY[|�Y[Zcb�MYev � Z�_�]���fj|6ZguA� ��Zgu Z��91%�LY[b0f

� ]`u =���fju�� f �MY[v � Yev �3� ]gb0b0f�� v0u�f���� ��f� ]gb0fAv �Lf;Z�� v �LZg|^dgf�bBY[=���Zcv0Ye]`u ]��.Lb0]��f�b0v0Yef��& U��<Y�� �Ef�� v0Y[]`u)�Lf�� � bBY ��f��v ��f �<Z��0Y�� � fjZcv �Lb0f��T]�� �0Y[_)�L|[Zcv0Y[]`u Y[u4�`�'����� &c?A�Lb0v ��f�b ��f�v0ZgY[|���]`u v ��f �0Y[_)�L|[Zcv0Ye]`u4� ]`_a_aZguA�A� ��Zgu���f� ]D�<uA� Y[u S^f�� v0Y[]`u ,.&-, l SVY[_)�L|[Zcv0Y[]`u C ]`_a_aZguA��� m k�<Z��gf),g(�&

P u ]gb���f�b\vE] Z����LY[f�dgf _aZ� �Y[_ �<_ �Lf0 �Y �<Y[|[Y[v } ZguA� �Lf�gb0f�f��a]���� bBf�f���]`_$Y[u Z �BY[_ �<|[Zcv0Ye]`u �Ef�� �BYe]`u6k�`�'����� "f�b9_aYev �pv ��b0f�f �<Y�:"f�bBfju vGvEbBZ�� f��gfjuLf�bBZcv0Ye]`uI�0vEbBZcvEf�`Yef���� ��f�vEf�bB_\Y[uLY��Ev0Y �ck�b9ZguA��]`_�ZguA�aY�u vEf�bBZ�� v0Y[dgf�&~AZ�� � ]��(v ��fj_ � ]gb0b0f��$�]`uA����vE].ZI�<Y�:"f�bBfju v#��Zj} ZI�Ev0ZcvEf Y �"<Y����gf�� � b0]`_ Z2�0f�vM]��0�]D� �0Y �<|[f � ��]`Y�� f��&�P u��f�vEf�bB_aY�uLY��Ev0Y����0Y[_)�L|[Zcv0Ye]`u _�]���f v ��f =Lb��Ev �Ev0ZcvEf ]��FZ �0f�v q � �LZcvEf�dgf�b\Yev5Y��9x Y��)���L]D�Efju6k � �LY[|ef�Y[u v ��fbBZguA��]`_?]`u�f\v �LfI����]`Y � f�Y��("f�b�� ]gbB_af�� u�]`uA��f�vEf�b9_aY[uLY��0v0Y���Zg|[|e}�&�P u v ��f��0f\v[�;] =Lb��Ev,_�]���f�� vEbBZ�� f��5Zcb0fZ���vE]`_aZcv0Y���Zg|�|e} �gfju�f�bBZcvEf�� �w}�� �������2�,v �Lf��A�Ef�b ]��Lv0ZgY[uA� v ��ff� ��]`|[fa]���v ��f\vEbBZ�� f�Y[u Z v0Y[_�ff�MY[v ��]D��v� ]`u vEbB]`|�]�dgf�b v ��f �gfju�f�bBZcv0Y[]`uKYev �0fj| �aq f0 �� fLv*� ]gb\v ��f �0Y[_)�L|[Zcv0Ye]`u _a]���f ZguA� v ��f u%�<_ ��f�ba]��(�Ev0ZcvEf��fju vEf�bBf�� dVY[Z � ]`_a_aZguA� |[Y[u�f�x &

P u v ��f.v �<Yeb����0Y[_)�L|[Zcv0Ye]`u _�]��Lfgk(v ��f*���Ef�b �LZ��5Z4� ]`_ 2|ef�vEf � ]`u vEb0]`|�]�dgf�b�vEbBZ�� f�� �gfju�f�b9Zcv0Ye]`u��w}Y[uwvEf�bBZ�� v0Yedgfj|e}����LY�|��LY[u.�\v ��f�vEbBZ�� f�&I/ ��bBY�u.��Zgu Y[u vEf�b9Z�� v0YedgfI�0Y[_)�L|[Zcv0Y[]`u �0f�� �0Ye]`u6ktv ��f2�E}��EvEfj_ �EvE]��� Zcvf�dgf�b0} �EvEfOk3� ��]*�MY[u.� Z |[Y �Ev ]�� �]D� �BY �<|ef)� �Lv ��b0f2�Ev0ZcvEf���� v ��fI�A�0f�b Y��Tb0f 1���f��EvEf�� vE]�����]^]D�Efa]`uLfa]���v ��fYevEfj_2�& U �LY�� � fjZcv ��b0fFY�� <ZcbBv0Y���L|[ZcbB|[} �A�Ef� �L|o� ��fjua]`u�fX�;Zguwv �;vE] Y�uA�$�f�� v �E]`_�f�<Zcb0v0Y���<|[Zcb b0fjZ�� v0Ye]`u��A]��v ��f _a]���fj|tvE]I��f � ��f�� �gf�� &'� �Lfju v ��f u%�L_ ��f�b4]�� �]D� �0Y �2|ef � ��v �Lb0f �Ev0ZcvEf��Ff0 .� f�f��A��Zgu Y[uwvEf�bBuLZg|O|�Y[_aYev�kbBZcv ��f�b v �LZgu +� ]`u.� �A�0Y[u.�?+ v ��f �A�Ef�b+�MY[v � Z ���L]`Y�� f � b0]`_ Z �LY �D� u%�<_ ��f�bF]�� �]D� �0Y �<|[f,f�dg]`|���v0Ye]`u���k�v ��f�E}��EvEfj_�Z�� ���Av ��f �A�0f�bAvE] + �D�LY��Lf�+;v ��f �0Y[_)�L|[Zcv0Ye]`u�dVY[Z v �LfMY[uA�Ef�bBv0Ye]`u�]�� �E]`_�f � ��bBv ��f�b � ]`uA�EvEb9ZgY[u v �z]=dgf�bv ��f*"]D���0Y �<|ef � ��v ��b0f��Ev0ZcvEf��& U��Lf��E}��EvEfj_ �MY[|[| � ]`uwv0Y[u���f\vE] Z��$� � ]gb)� ]`uA�0vEbBZgY[uwv � Y[u��Ef�b0v0Ye]`u �<u v0Y[| v ��fu%�<_ ��f�b4]��3� �Lv ��b0f(�Ev0ZcvEf��X�MY[|[| ��f �LuA��f�b)v �Lf(Lb0f���f>=2u�f�� v ��b0f�� �L]`|�� & U���f(� ]`u��EvEbBZgY[uwv �)fjuwvEf�b0f����A�LbBY[u.�v �LY�����LZ��0f Zcb0f�Z����L_)�L|[ZcvEf�� qsY[u Z�|e]��`Y���Zg|3Lb0]��A�A� v9x4Y[u Z �0Y�u.�`|ef �2Y ��� ]`uA�0vEbBZgY[uwv&TU �LY���� ]`uA�EvEbBZgY[uwvTY���A�Ef�� ]`uL|e} � ]gb v �Lf ���bBb0fju v3�EvEf5]��Lv ��f �0Y[_)�L|[Zcv0Ye]`u ZguA� Y � �LY � ��Zcb���f�� �"f� ]gb0fzv ��f;uLf0 ^v0�EvEf &GU���f �E}��0vEfj_����f������4v ��f�f0 �Lb0f����0Ye]`uA�Afju vEf�b0f��*�^}av ��f �A�Ef�b�ZguA�*��]wf���u�]gv�Z��� fLv�v ��fj_V� ��fjuLf�dgf�b�Zgu�Y[uA� ]`u��0Y��EvEfjuA� }ZcbBY��Ef���& C Z��Ef��)]��(Y[u�� ]`uA�0Y��EvEfju�� } qsY & f�& fj_2Lv } �Ef�v4]�� �Ev0ZcvEf��9x4_aZj} ��f ��Z��A�Ef����w}"�? v ��f,fjuwvEf�b0f�� f0 �Lb0f����0Ye]`uA�,qsY & f�&zZ�� 9�Z x �? v ��f,b0f����L|ev�]��Gv ��f fju vEf�bBf�� f0 �Lb0f�� �0Y[]`uA�"� ]`u��E]`Y[u�f��S�MY[v � Lb0f�dVYe]D�A�)Z����L_)�L|[ZcvEf�� ]`u�f�� �? v ��f,b0f����L|ev�]��(Z����L_ �<|[ZcvEf���� ]`uA�0vEbBZgY[uwv ��� ]`u��E]`Y[u�f��S�MY[v � v ��f(�Ef�v4]��0�]D� �0Y �2|ef � ��v ��bBf �0v0ZcvEf��&i�v }�<Y���Zg|Af0 ^f���Lv0Ye]`u �Ef 1���fjuA� f.]��)Z �0Y[_)�L|[Zcv0Ye]`u �0f�� �0Ye]`u � ]D�L|�� ��faZ��(� ]`|[|e]*� �& S��.A�]D�Ef5vE]4���Efv ��f _�]���fj| ��f���� bBY ��f�� ��fj|e]/�(&�BWVQIYJZUR � >�����UCgH �.6��`�A6<��� !�:�:�;%6�>c������.>`��6 ! `�.6�> 8�����w�6�$� ���C����BD�E%����"�c���j���.>`��6�� !��&�.6�> 8������6��w���j���.>`��6�� !��D� >���6���.>`�.6��&��6�>D8��! ��.6��`�A6<��� !^�6�$���

" !� `�.6�> 8�����w�6�$� ���6<��>��%�

Page 11: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| O

i �FZ2<b0fj|[Y[_aY�uLZcb0}��0vEfOk<v �LY �M_�]���fj| �LZ���vE]\bBfjZ�� Y[uwvE]\v �Lf � ������� �E}��EvEfj_ &4U��<Y�����Zgu4�"f ]��Lv0ZgY[u�f����w}f0 ^f���Lv0Y[u.�av ��f � ]`|[|[]/�MY[uA�)� ]`_a_\ZguA�A� q �;f Z�� ���L_�f v �LZcv4v �Lf,_�]��Lfj|OY��"�0Z=dgf�� Y[u =<|[f�� � :`�^���B���L�Lx9����$�"����6��

�����:���������� B�������I>C=G N�YDJ�W9G�O5N)d�

�`�'��������� J�`�'�������P ua]gb��Lf�bAvE] �0v0Zcb0vzv �Lf �0Y[_)�L|[Zcv0Ye]`uOk Zgu\Y[u<Yev0Y[Zg|.�Ev0ZcvEf �LZ�� vE])��f ���L]D�Efju & U��LY � ��ZguI��f ��]`uLf�Y[u�v �Lb0f�f

�;Z=}��j�? �w}���f� Z��<|ev�kwv �Lf��0Y�_ �L|�ZcvE]gb �A�Ef��;v ��f � ��� � ��� ��� � � �,Z���Z)�Ev0Zcb0v0Y[u.� �]`Y[u vz]��Of�dgf�b0}\uLf9� �BY[_ �<|[Zcv0Ye]`u �v �LY�� ��f��LZjdVYe]gb�Y��3�]D� �BY �<|ef ]`uL|[} Y�� ZI���b0bBfju v��Ev0ZcvEf�Y�� ��f>=2u�f�� q f�& �.&ekOY � �;f ZcbBf f0 �<|e]gbBY[uA�\Z\vEb9Z�� fgkZ�� ��f���� bBY ��f�� Y[u S^f�� v0Ye]`u�,.& nTl Utb9Z�� f��4P uA�$�f�� v0Ye]`u C ]`_a_\ZguA�A� m k.<Z��gf., i`x �? Y � � ]`_a_aZguA� <�:`�.:

����.>`��6\Y����A�Ef��6kLv �Lf)�A�0f�b ��Zgu �Efj|ef�� vTZgu } �Ev0ZcvEf5]�� Zgu Zg|eb0fjZ���} f0 �Y��EvEfjuwv�vEb9Z�� fZ��4v ��f � � ������ ��� � � � q �Ef�f �Ef�f5S^f�� v0Ye]`u ,.& n l UtbBZ�� f��MPRu��$�f�� v0Ye]`u C ]`_a_aZgu��A� m k.<Z��gf), i`x �

? Y � ���^� <����A>g�.65Y��"�A�Ef��Ok^v �Lfju v ��f(�A�Ef�b���Zgu � ��]^]D�Ef,v ��f(�Ev0ZcbBv0Y[u.� �Ev0ZcvEf,]��pv ��f(�0Y[_)�L|[Zcv0Y[]`u.Zg_�]`uA�v ��f,Y[uLY[v0Y[Zg|��Ev0ZcvEf��M]��tv ��f _�]���fj| �Vv �LY � � ]`_\_aZguA� �LZ���vE] ��f �A�Ef�� � ��fju Z � ��� � ��� ��� � � � ��]^f��)u�]gvf0 VY �Ev4}gf�v q v �LZcv�Y���� ��fju v �Lf �E}��EvEfj_ �LZ��"��fjY[uA� bBf��Ef�v9x &

i�v,v �<Y�� �]`Y[u vT]��;v ��f�f0 �Zg_ <|ef ����������� ��� � � �*��]^f�� u�]gv,f0 �Y��Ev�k ZguA� v ��f�b0faY�� uL] vEbBZ�� fI���b0bBfju v0|e}�EvE]gb0f�� Y[urv ��f��E}��0vEfj_ & U���f�b0f� ]gb0fgk Zgu YevEfj_ � b0]`_?v ��f��Ef�v ]��4Y[uLYev0Y[Zg|0�Ev0ZcvEf�� �LZ�� vE]���f <Y����gf�� �A�BY[u.�� ]`_a_aZguA� �"�^�=<

����A>`��6�&Fi �0Y[_)�L|[Zcv0Y[]`u �Ef�� �0Ye]`uI��ZguI��f��Ev0Zcb0vEf���u�]*�,k%�A�BY[u.� v ��f,�w�j�V�';%>`�.6(� ]`_a_aZgu�� &

C ]`uA�0Y ��f�b"� ]gb�Y[uA�Ev0ZguA� f v �Lf(� ]`|�|e]/�MY�u.� �0Y[_)�L|[Zcv0Ye]`u �Ef�� �BYe]`u6��$�"����6��

�����:���������� B�������I>C=G N�YDJ�W9G�O5N)d�

�`�'��������� J�`�'������� eDI�E�� N)G)K�G)M��"W�`�'������� eoW9I>CgG EHBDW0W9M*C=G N)G)K�G)M��� �c���^��6g�V� ���.>`�.6 �^� " � "��6��`�A6<���!� &���A>`��6��&�.6�> 8���`�'������� N)I>dkBDL>K�G)M��"W������������������� �g�A>`�w�2�=�D< �V�j����;�>g�2�D:c� Sw�.:�� �g�A>g�.6 " � " ������������������`�'������� N)YFJ�� G W9K�EHM�N���GG � 6 ��6 �V� " �w�A>���6 ���V�^�.6c���.; � >g�A>V� ;�>�'; 6z��`�'������� N)YFJ�� G W9K�EHM�N��� ��������������������������������������� G^�A>V�D6 �w� � �6 � ! " ���������������������������������������� � �g�A>g�.6 "t� "� ��.6��`�A6<����� &���.>`��6��&�.6�>D8��� � �g�A>g�.6 "t�$@! ��.6��`�A6<����� "���.>`��6�� ^�6�$�� � �g�A>g�.6 "t� �" ��.6��`�A6<����� "���.>`��6��&�.6�>D8��� � �g�A>g�.6 "t�$#% ��.6��`�A6<����� "���.>`��6�� ^�6�$�

C ]`_\_aZguA� eDI�E�� N)G)K�G)M��"W b0f 1��LYeb0f��;vE] <Y � �\v �Lf �0v0Zcb0v0Y[u.� �Ev0ZcvEf,]�� v ��f(�0Y[_)�L|[Zcv0Y[]`u � � �'&)(+*�,.- � bB]`_v ��f �Ef�v ]�� Y[u<Yev0Y[Zg| �Ev0ZcvEf�� ]��5v ��f _a]���fj|B& C ]`_a_aZguA� N�I>d BDL>K�G)M/�"W/� Z��$��� vE] ���<Y[|�� Z�v ��b0f�f W �EvEf���0Y[_)�L|[Zcv0Ye]`u �^})<Y�� �VY[u.�TbBZgu���]`_a|e} v ��f4u�f0 Vv �Ev0ZcvEf�� ]���v ��f��0vEf��&!i � � ��]/��u �w} � ]`_a_aZgu�� N)YDJ0� G W9K(EHM*N�� k^v ��f4bBf�� �L|ev0Y[uA��vEbBZ�� f�� ]`u v0ZgY�uA�7, �0v0ZcvEf��Fq v ��f�Y[uLYev0Y[Zg|^]`u�fgkVZguA��v �Lf4v ��b0f�f4]`uLf��(v �LZcv �<Zjdgf ��f�fjuaZ�����f���w}rv �Lf\bBZguA�L]`_ �0Y�_ �L|�Zcv0Ye]`u2x &��rf.b0fj_\Zcb �rv �LZcv v �Lf��gfju�f�b9ZcvEf�� vEb9Z�� f�� Zcb0f u��L_ ��f�b0f��O� f�dgf�b0} vEb9Z�� f��132547686890:;2=<�>?4�<@2$AB2$C8DFEBG�HJIBKMLON7:;:�47P?QFRS6UT.NWVSVSN�X�2YQ[Z\D]4]^ _�`�a bdcB2$D�6e<8C�NWcW2WfdghPi<�>j2=T.NWVSVSN�XkRSP0lM2$m04J:;njVS2O6OojEWG�HJIBKLONW:;:�4JP?Q�6p4JC�2qXpC�Rr<8<�2OP]RSP]45s+tJuSvFw.x�y{z|<�N}Q0RS6e<�RSPjlW90RS68>i<�>j2O:/T.C�NW:�6eD�6e<�2O:~N790<�nj9�<p:;2O686�4JlW2O6Of

Page 12: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| i

Y��FY���fjuwv0YA=Lf�� �^} Zgu Y[uwvEf�gf�b u%�L_ ��f�bjkF� �LY[|ef,f�dgf�bB}4�Ev0ZcvEf ��fj|e]`u.�`Y[uA�avE] Z\vEbBZ�� f�Y��FY���fjuwv0YA=Lf����w} Z &)(���'(�� � � � ( �p� � ]gb4f0 �Zg_ <|ef(�0v0ZcvEf��N"�� Y��)v ��f v �LY[b�� �Ev0ZcvEf ]��pv ��f)=<b��Ev �gfju�f�bBZcvEf�� vEbBZ�� f�&

<�]/� v �Lf ���Ef�b ��Zgu �Ev0Zcb0v�Zru�f9� �0Y[_)�L|[Zcv0Ye]`u �^} ���L]w]D�0Y�u.� Z u�f9� �0v0Zcb0v0Y[u.���Ev0ZcvEf�& PRu v ��f u�f0 Vvf0 VZg_2<|efgk � ]gb Y[uA�0v0ZguA� fgk6v ��f2�A�Ef�b f0 VvEfjuA�A�,vEbBZ�� f h �^} =Lb �Ev ����]^]D�0Y[u.� �Ev0ZcvEf h�&-, Z�� v ��f ����������� ��� � � �ZguA� �^} v ��fju b��Lu<uLY[u.� Z�bBZguA��]`_ �0Y[_)�L|[Zcv0Ye]`u�]��(|efju.�gv � l�&�`�'��������� J(G)J N)G)K�G)M���O��G � 6D���.>`�w�2���o<D���.>`��6�:`� ��6D5 �w�A>V�D6 �^�0!� � �g�A>g�.6 @ �$#% ��.6��`�A6<����� "���.>`��6�� ^�6�$��`�'������� N)I>dkBDL>K�G)M��"W����������������� ���j�V�';%>`�2��:g� �`�A>g�^�<���D< S^��:�� �`�.>`��6 @ �$# ����������������`�'������� N)YFJ�� G W9K�EHM�N��������������������������������������� Gw�A>���6 �^�`��A6 � ! @ �������������������������������������� � �g�A>g�.6 @ � "� ��.6��`�A6<����� "���.>`��6��&�.6�>D8��� � �g�A>g�.6 @ �$@! ����.>`��6�� ^�6�$�� � �g�A>g�.6 @ � �" ��.6��`�A6<����� &� � �g�A>g�.6 @ �$#% ��.6��`�A6<����� "� � �g�A>g�.6 @ �� ! ��.6��`�A6<����� &� � �g�A>g�.6 @ ���" ����.>`��6��&�.6�>D8��� � �g�A>g�.6 @ ���" ��`�'�������

i �Mv ��f b0fjZ���f�b���Zgu �Ef�f(� b0]`_ v �Lf(Lb0f�dVYe]D�A��f0 �Zg_ <|efgk�v �Lf u�f9��vEbBZ�� f Y��"�EvE]gb0f�� Z��)vEbBZ�� f)G�&U��Lf ���Ef�b,Y�� Zg|��E] Z��<|[f�vE] Y[u vEf�b9Z�� v0Yedgfj|e}�����]^]D�Ef�v ��f2�Ev0ZcvEf�� ]��Av ��f�vEb9Z�� fI��f3�;Zguwv �,vE] �'�LY[|��6��Zguf0 VZg_2<|ef,]��GZgu Y[uwvEf�bBZ�� v0Yedgf)�0Y[_)�L|[Zcv0Ye]`u Y��"� �L]/�Mu ��fj|e]*�,��`�'������� eDI�E�� N)G)K�G)M���I����������������������������� C%�UCLD�ZUC��IZUR SNY GNYJHJR �NGJCgGUR.� �������������������������

& � ��������������������������������������������� ����.6��`�A6<����� "���.>`��6��&�.6�>D8��"�� ��������������������������������������������� ����.6��`�A6<����� &� � :�:L��6 > ���A>`��6w��:��D� � 6 > A: ��6 � & � "�� ! � ^ _�`�a b

� � :<��6g����A>`��6 �V�3! "�`�'������� N)I>dkBDL>K�G)M���I����������������� ���j�V�';%>`�2��:g� �`�A>g�^�<���D< S^��:�� �`�.>`��6 �A� " �������������������������������������������� C%�UCLD�ZUC��IZUR SNY GNYJHJR �NGJCgGUR.� �������������������������

& � ��������������������������������������������� ����.6��`�A6<����� "

Page 13: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| F

���.>`��6��&�.6�>D8��"�� ��������������������������������������������� ������.>`��6�� ^�6�$�@ � ��������������������������������������������� ����.6��`�A6<����� &���.>`��6��&�.6�>D8��� � ��������������������������������������������� ������.>`��6�� ^�6�$�� � :�:L��6 > ���A>`��6w��:��D� � 6 > A: ��6 � & � ��� !�� ^ _�`�a b

� � :<��6g����A>`��6 �V�3!��6��`�A6<���!� "���A>`��6��&�.6�> 8���`�'������� N)YFJ�� G W9K�EHM�Ni�������������������������������������� Gw�A>���6 �^�`��A6 � ! � �������������������������������������� � �g�A>g�.6 �A� "� ��.6��`�A6<����� &���.>`��6��&�.6�>D8��� � �g�A>g�.6 �A�$@! ��.6��`�A6<����� "U��Lf �A�0f�b*��Zgu&Zg|��E] �$�f���Y � } �E]`_�f � ]`uA�EvEb9ZgY[u v ��vE] b0f��EvEbBY � v.v ��f��Ef�v ]�� �Ev0ZcvEf�� � b0]`_ � �LY ���Kv ��f

�0Y[_)�L|[ZcvE]gbf��Y[|[| <Y���� ]D��v& C ]`uA�EvEbBZgY�u v � ��Zgu �"f �0f�v2� ]gbI�"]gv � v ��f*�"�^�=<����A>`��6 � ]`_\_aZguA� ZguA� v ��f� �j����;�>g�.6 � ]`_a_\ZguA� �A�0Y[uA� ]�Lv0Y[]`u � ��&7?�]gb4f0 �Zg_ <|efTv ��f � ]`|[|e]*�MY[u.�)� ]`_a_aZguA� <Y�� ���)Zgu Y[uLY[v0Y[Zg|'�0v0ZcvEf

�w} ��f>=2uLY[u.�5Z2�0Y[_2<|ef � ]`uA�EvEbBZgY[uwv���`�'������� eDI�E�� N)G)K�G)M��[E + WHM�� BFM*N)G�� � + ��I����������������������������� C%�UCLD�ZUC��IZUR SNY GNYJHJR �NGJCgGUR.� �����������������������������

& � ��������������������������������������������� ����.6��`�A6<����� "���.>`��6��&�.6�>D8��G � 6 ��6�� � :g��; � :g�A6 `�V� ����6 ���.>`��6z� �w�.6<�w� HA6`� �V� � ��: �w�.:��D6�6 8;� ^ _ `�a b� � :<��6g����A>`��6 �V�3!+&�`�'������� �=BDI>G�$�"����6��

�����:��������

<M]gvEf ��]/� v �Lf(�Ef�v)]�� �]D� �BY �<|ef��Ev0ZcvEf��)vE]I� ��]w]D�0f(�LZ��"��fjY[u.� b0f��EvEbBY � vEf�� qsY[u v �LY�� ��Z��Ef,v �Lf�b0f Y���]`uL|e}.]`u�f� �Lv ��b0f �Ev0ZcvEfgk �E] v ��f �E}��EvEfj_ �MY[|�| Z���vE]`_aZcv0Y���Zg|�|e} <Y � � Yev�k ��ZgYev0Y[uA�4� ]gb5v ��f*���Ef�b5vE] <b0f�� � v ��f ^ _�`�a b�gf�}�x &

�rfFb0fj_aZcb �5v �LZcv�k�Y[uav ��f ��Z��Ef�]�� � ]`_a_aZguA� � �j����;�>g�.6<k`v ��f � ]`uA�0vEbBZgY[uwv � ��f>=2u�f��2�A�0Y�u.�,]�Lv0Ye]`u � �Zcb0f + �`|e]��<Zg|$+�� ]gbMv ��f Z�� v �LZg|tvEb9Z�� f vE]I��f(�gfjuLf�bBZcvEf��6k�Y[u v ��f �0fjuA�Ef,v �LZcv�v ��f�} Zcb0f Zg|��;Z=}��FY[uA��|�����f�� Y[uf�dgf�b0}I�EvEf.]��6v ��f �BY[_ �<|[Zcv0Ye]`u &pU���f�}�Zcb0f �LfjuA� f � ]`_ <|[fj_�fju v0ZcbB}�vE] v ��f�� ]`uA�EvEbBZgY[uwv �zfju vEf�b0f�� �MYev �av ��f�"�^�=<

����A>`��6 � ]`_a_\ZguA�6k6]gb �A�LbBY[u.��ZgurY[u vEf�b9Z�� v0Yedgf2�0Y[_)�L|[Zcv0Ye]`u��Ef����0Ye]`u � ��fju v ��f�u��L_ �"f�bT]�� � �Lv ��b0f

�Ev0ZcvEf��,vE]��"f �LY �$<|[Z=}gf�� Y �TvE]w] �LY��D�6k �0Y[uA� f5v ��f��EfaZcbBf�+ |e]���Zg|7+ ]`uL|e} vE] Z �BY[u.�`|ef �0Y[_)�L|[Zcv0Ye]`u��EvEf ZguA�Zcb0f + � ]gb��g]gvEvEfju0+,Y[u v ��f u�f0 Vv4]`u�f�&

Page 14: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| h�m

��� 1 # ��� 8:� *��A/ Iml5�AI�� 7B3&^U��Lf�_aZgY�u '��b �]D�Ef\]��FZ _�]��Lfj| � ��f�� �gf�b�Y�� vE] dgf�b9Y � } v �LZcvaZ _�]��Lfj| �0Zcv0Y � =Lf��5Z��Ef�v�]�� ��f��0Y[b0f��

Lb0]��f�b0v0Yef��)�$�f���YA=Lf�� �w}rv �Lf*�A�0f�b�& P u � �'�����2kGv ��f �$�f���YA=���Zcv0Y[]`uA�,vE]���f�� ��f�� �gf�� ��Zgu���f\f0 �Lb0f�� �0f��Y[urv\�z] �LY�:�f�b0fju v vEfj_2"]gb9Zg|(|e]��`Y�����,v �Lf C ]`_ ��Lv0Zcv0Ye]`urUtbBf�f *O]��`Y�� C U+* kOZgu��rv ��f *tY�u�fjZcb U fj_ �]gbBZg|*O]��`Y��.*^U\* f0 VvEfjuA��f��S�MY[v ��oGZ��Ev8j��f�bBZcvE]gb��& C U+* ZguA� *VU+* �$�f���YA=���Zcv0Ye]`uA�)ZcbBf f�d�Zg|��<ZcvEf�� �w}*� �������Y[u.]gb���f�b�vE])�Lf�vEf�bB_aY[u�f�v ��fjYeb;vEb���v ��]gb � Zg|��BYev }\Y�uav ��f8? S.- &�� ��fju Z � "f���Y[=���Zcv0Ye]`u�Y�� �<Y�� � ]=dgf�bBf��.vE] ��f� Zg| �Efgk � �������4� ]`uA�EvEb��A� v � ZguA� LbBY[uwv �TZ � ]D�Lu vEf�bBf0 VZg_ 2|efgktY & f�&5Z vEbBZ�� f�]��;v ��f�?(SA-$v �LZcv �sZg|��0Y[=Lf��Fv ��fLb0]��f�b0v{}�& P u v �LY � �Ef�� v0Y[]`u �;f ��Y[|[| ��f���� bBY ��f\_�]���fj| � ��f�� �VY[u.� ]����$�f���YA='��Zcv0Ye]`uA�,f0 �Lb0f����Ef�� Y�u C U\* k� �LY[|[fFv �Lf,u�f0 ^v �Ef�� v0Ye]`uT�;f(� ]`uA�0Y ��f�b4v ��f(��Z��Ef ]��K*VU+* �$�f���YA=���Zcv0Ye]`u��&

C U\* Y ��Z ��� � ��� � ���� � � * �\|e]��`Y�����4Yev � � ]gbB_ �<|[Z���Zg|�|e]/� � ]gb��$�f���Y � }VY[u.�2LbB]�"f�bBv0Yef��4v �LZcvTv0Z��gf�Y[uwvE]Z��� ]D�Luwv)v ��fFuL]`uVW ��f�vEf�bB_aY�uLY��Ev0Y��ck%�LbBZguA� �LY[u.� f�dg]`|���v0Ye]`u�]��tZ&? S.- &�- ]gb0f Lb0f���Y��0fj|e}gk v ��fTf�dg]`|��Lv0Ye]`u\]��pZ? S.- � b0]`_ ZI�`Yedgfju��Ev0ZcvEf ��Zgu ��f ��f���� bBY ��f�� Z��TZgu Y[u =<uLY[vEf,vEb0f�fgk � ��f�b0f v ��f5u�]���f���ZcbBf v ��f �Ev0ZcvEf��T]��v ��f6?(SA- ZguA�av ��f �LbBZguA� �LY[u.�,Y�uI�A��fMvE] v ��fFu�]`uVW ��f�vEf�b9_aY[uLY��B_�Y[uav ��f�vEbBZguA�0Y[v0Ye]`u�b0fj|[Zcv0Y[]`u &(U���f�<Zcv ���Y[u v ��f�vEb0f�f�v �<Zcv �Ev0Zcb0v,Y[urZ �`Y[dgfju �Ev0ZcvEf\Zcb0f�v �Lf "]D���0Y �<|ef Zg|evEf�bBuLZcv0Y[dgf�f�dg]`|���v0Ye]`uA�,]��zv ��f ? S.- � bB]`_v �LZcv �Ev0ZcvEf�&;P u C U+* ]`uLf(��Zgu f0 �Lb0f�� �"<b0]��f�b0v0Yef���v �LZcv ����]D�L|�� ��]`|�� � ]gb � , , �� ��� � �� � v �LZcv �Ev0Zcb0v4Y�u Z�Ev0ZcvEfgk2Z�� �zfj|�|6Z���� ]gb�Lb0]��f�b0v0Yef���v �<Zcv � ��]D�L| �*�L]`|�� �$���Ev"� ]gb �B(?* � (� �� ��� � �� � &

C ]`u��0Y���f�b�� ]gb�Y�uA�Ev0ZguA� f C U+* � ]gbB_)�L|[Z�CIS2� &zPRv4f0 �Lb0f�� �0f��4v ��f)� ]`uA�LYev0Ye]`u v �LZcv�k�� ]gb � , ,Gv ��f(<Zcv ���q CVx �Ev0Zcv0Y�u.�4� b0]`_ Z4�0v0ZcvEfgk ����������� � , ,�- � � �� �� �� ��� � � q S�x � ]`uA�LYev0Y[]`u � _)�A�Ev ��]`|�� & U��LZcv5Y���k(Zg|[|zv ��f�]D� �0Y �<|[f f�dg]`|���v0Ye]`u��.]�� v ��f �E}��EvEfj_ �MY[|[|Mf�dgfju v �LZg|�|e} b0fjZ�� � Z �0v0ZcvEf �0Zcv0Y��$� }^Y�u.� � ]`uA�<Yev0Ye]`u �?& C U\*� ]gb9_ �L|�Z)RUS2�6k ]`u�v ��f�]gv ��f�b �<ZguA�6k bBf 1%�LY[b0f�� v �LZgu.v ��f�b0f���� � ��� ���E]`_af <Zcv � q R�x v �LZcv;f�dgfju v �<Zg|[|e}aY[u\v ��f� �Lv ��b0f(�0Zcv0Y�� =Lf�� � &

SVY�_aY[|[ZcbB|[}gk� ]gbB_)�L|[Z\CIE2�,b0f 1%�<Yeb0f��6v �LZcv3� ]`uA�LYev0Y[]`u�� Y��tZg|>��Zj}���kc]gb��), ( � � , ,�-ckgvEb��LfAY[u,Zg|[| v ��f �Ev0ZcvEf��p]��Zg|[|�v ��f "]D���0Y �<|ef <Zcv ����k � �LY�|ef � ]gbB_)�L|[Z6RJE2�5b0f 1��LYebBf��(v �LZcv v ��f�bBfMY�� �E]`_af�<Zcv �\Zg|[]`u.��� �LY ��� � ]`uA�LY[v0Ye]`u� Y��"� ]`u v0Y�u%��]D���0|e}\vEb ��f�&

jFv �Lf�b C U+* ]�"f�b9ZcvE]gb��4Zcb0fg�? C�� � Y ��� ZguA� R�� � Y ���<kMb0f 1%�<YebBY[u.� � ]`uA�LYev0Ye]`u �KvE] ��f vEb��Lf � ��� � , Z �Ev0ZcvEfrY��.b0fjZ�����f��&v �<Zcv

�0Zcv0Y�� =<f���� ]`uA�LYev0Y[]`u � �? C��2� ZguA�fR�� �6kcb0f 1��LYebBY[uA�4v �LZcv � ]`uA�LYev0Y[]`u � Y �tvEb��Lf;Y[u Zg|[|w]gb(Y[u �0]`_�f�]��Lv ��f)u�f0 Vv3�Ev0ZcvEf�� b0fjZ����LZ��2|ef

� bB]`_ v ��f ���bBb0fju v��0v0ZcvEf�&C U\* ]�"f�b9ZcvE]gb�� ��Zgu ��f;uLf��EvEf���Y[u Zgu�Zcb �<YevEbBZcbB}��;Z=} Zgu��)��Zgu ��f"� ]`_ �<Y[u�f�� �A�0Y�u.��|e]��`Y �z]��f�bBZcvE]gb �q �0k 2k �Ek � ��k � �A& & & x &AUz}%2Y���Zg|"f0 VZg_ 2|ef��;]�� C U+* � ]gbB_)�L|[Z���Zcb0f8CUE � � q +� ]`uA�LYev0Y[]`u2� Y���Z����Efjuwv)Y[u Zg|[|v ��f,f�dg]`|��Lv0Ye]`uA��+=x9kBCIE RUS � q + Yev4Y �)Zg|>�;Z=}�� �]D� �0Y �<|[fMvE]ab0fjZ�� � Z2�0v0ZcvEf�� ��f�b0f�� ��]`|�����+jx9k�ZguA� CUE � � � �CgS � ��q + fjZ���� ]����Lb0b0fjuA� f ]�� � ]`uA�LY[v0Ye]`u�� Y � � ]`|[|[]/�;f�� �w} Zgu ]�����b0bBfjuA� f ]�� � ]`uA�LYev0Ye]`u � +=x &P u � ������� Z C U+* �$�f���YA=���Zcv0Ye]`urY � �`Yedgfju Z�� C U+* � ]gbB_)�L|[Z Y[uwvEb0]��A�A� f����^} v �Lf2�gf�}=�;]gb�� � � �UR����q �Ef�f�S^f�� v0Y[]`u l�& l�&[h�l C U+* S��f���YA=���Zcv0Ye]`uA�)m k <Z��gfIG�F`x & � �Lfju�f�dgf�b Z C U+* �$�f���YA=���Zcv0Ye]`urY���LbB]�� f�� �0f��6k

�`�'����� ����f������ � �Lf�v ��f�b v ��f C U+* � ]gbB_)�L|[Z Y�� vEb���fMY[u\Zg|[|�v ��fMY�uLYev0Y[Zg|.�Ev0ZcvEf��z]���v ��f�_a]���fj|B& P ��v �LY�� Y��Au�]gvZ ��Z��Efgk�v ��fju � �������2�gfju�f�bBZcvEf��4Z � ]D�LuwvEf�bEW f0 �Zg_ <|efgk�v �<Zcv4Y���k�Z q =<uLYevEfF]gb4Y[u =<u<YevEf�xGvEbBZ�� f v �<Zcv)f0 ��LY��<Yev �ZadcZg|[Y�� ��f��LZ=d^Y[]gb4]��(v ��f _�]���fj|tv �LZcv ��]^f��MuL]gv �0Zcv0Y��$� } v ��f � "f���Y[=���Zcv0Ye]`u &;UtbBZ�� f��FZcb0f dgf�b0} �A�Ef� �L|?� ]gbY���fjuwv0Y � }^Y[uA� v �Lf,f�b0b0]gbMY�u v ��f �$�f���YA=���Zcv0Y[]`u v �LZcvM|efjZ��A�MvE]av ��f��Mb0]`u.� ��f��LZjdVYe]gb�&��rf b0fj_aZcb � v �LZcvMv ��f�gfju�f�bBZcv0Ye]`u ]��zZ�� ]D�LuwvEf�bEW f0 �Zg_ <|ef vEbBZ�� f�Y��Fu�]gvTZg|>�;Z=}����]D� �0Y��<|ef(� ]gb C U+* �$�f���YA=���Zcv0Ye]`uA��&�U fj_ �]gbBZg|]��f�bBZcvE]gb��"� ]gb0b0f�� "]`u��LY[u.�,vE]5f0 �Y��EvEfjuwv0Y[Zg| <Zcv � 1%�<Zgu v0YA=<f�b�� ��Zgu<u�]gv ��f�Lb0]�dgf����sZg|��Ef��^}\Z � ��]/��Y[u.� ]��pZ�0Y[u.�`|[f f0 Vf����v0Ye]`u4<Zcv � &TS�Y[_aY[|[Zcb9|e}gkA� �.��WB� ]gbB_)�L|[Z�� Lb0f�� f���f��4�w}4�LuLYedgf�b��BZg| <Zcv � 1%�<Zgu v0YA=<f�b ��ZguLu�]gv ��fLb0]�dgf�� vEb���f �^} Z � ��]*�MY[u.��]��GZ2�0Y[uA�`|efTf0 ^f����v0Y[]`u <Zcv � &

C ]`u��0Y���f�bTv ��f ��Z��Ef�]��zv ��f2�Efj_aZ���L]gb0f Lb0]��gbBZg_ ��f���� bBY ��f�� Y�u S^f�� v0Y[]`u G�&[h�l ~! �Zg_ <|ef��)m k 2Z��gfIG�&i ��f��BYeb0f��4Lb0]��f�b0v } � ]gbTv �LY�� Lb0]��gbBZg_ Y��Fv �LZcvTYev � ��]D�L| � u�f�dgf�b ��f v ��f)��Z��0f v �<ZcvFv �Lf v\�z] LbB]�� f�� �0f���V�.:L��" ZguA� �V�.:�� @\Zcb0f Zcv�v ��f �0Zg_af v0Y[_�f Y[u v ��f\���2���2�^�D>�; �Ev0ZcvEf q v �LY���Y��MZgu f0 VZg_2<|ef ]��(Z + �0Z�� f�v } +Lb0]��f�b0v{}�x &AU �LY�� Lb0]��f�b0v{}*��Zgu��"f f0 �Lb0f����Ef�� �w} v ��f � ]`|[|e]*�MY[u.� C U\* � ]gbB_ �<|[ZV�

CIE � � ����:L� "t�9���A>`��6 �D���2�c�<�^�D>�; �V�.:L�D@A�B���A>g�.6 �D�c�2���2�w� >�; �i�uL]gv ��f�b)�Lf��0Yeb0f�� <b0]��f�b0v } Y��,v �LZcv�k Y � �V�.:�� " �;Zguwv � vE] fjuwvEf�b Y[v � � bBYev0Y ��Zg| �Ev0ZcvEfgk Yev f�dgfju v �<Zg|[|e} ��]^f��q v �LY��FY��MZgu f0 �Zg_ <|ef ]�� Z +�|[YedgfjuLf�� ��+ Lb0]��f�b0v }Lx &�U �LY��"LbB]�"f�bBv } ��Zgu4�"f f0 �<b0f�� �Ef��4�w} v �Lf � ]`|[|e]/��Y[u.�C U+* � ]gbB_)�L|[ZV�

Page 15: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| hgh

CIE � ����:L� "t�9���A>`��6 � 6c���.6`�2�=�D< � � CIS �V�.:L��" �B���A>g�.6 �����2���2�^�D>�; �PRua]gb���f�bAvE] dgf�bBY � } v ��fMv[�;] � ]gbB_ �<|[Z��(]`uav �Lf �Efj_aZ���L]gb0f4_�]���fj|�k �;fMZ��A��v �Lf4v[�;] � ]gb0bBf��$�]`uA�LY[u.� C U\*�$�f���YA=���Zcv0Ye]`u vE]av ��f Lb0]��gb9Zg_ k<Z��"� ]`|[|e]*� ���

�BWVQIYJZUR � >�����JCgH ��6�� >�� � : ��6 !�:%:�; 6�>c� �

�V�.:�� " !�����:L��6<�^� �6��6`� ����6�� >�� � : ��6�� ��V�.:�� @ !�����:L��6<�^� �6��6`� ����6�� >�� � : ��6�� �

C.��� D%E ��=����� �j��6�� >�� � : ��6�� ! � &�����UR�� CUE�� � ���.:�� "t�9���.>`��6 �D�c�<�c�<�^� >%; ����:L�D@A�9���A>g�.6 � ���2�c�<�^�D>�; ����UR�� CUE � ���.:�� "t�9���.>`��6 � 6g�V�.6`�2���o< � � CgS ����:L� "t�9���A>`��6 �D���2�c�<�^�D>�; �

�BWVQIYJZUR ����6 ���j��6��?>=� � : �.6 ��JCgH ���A>g�.6 !� V��8.; 6 �46c���.6`�2�=�D<�� �c�<�c�2�w� >%;�� 6��<���2���o<�� �C.��� D%E ��=����� �j���A>g�.6�� ! � ��8.;%6���A6�� � �j���A>g�.6�� ! ��D>L��6���A>`��6 �D��8�;%6 ! ���8.;%6���6g�V�.6`�2���o<�� ����A>`��6 � 6g�V�.6`�2���o<� ��B��6�� >�� � : ��6 ! �c�<�c�2�w� >%;�����A>`��6 �D�c�<�c�<�^� >%; ! ����2�c�<�^�D>�;�� 6��L�c�2�=�D< ������A>`��6 � 6��L�c�<���D< ! ��8�;%6 �

" !r���.>`�.6��6L�D>V�%��A6�� � �j��6�� >�� � : ��6�� ! ��D>L��6���A>`��6 � 6g�V�.6`�2���o< ! " ����A>`��6 � 6��L�c�<���D< !+& �" ! ��6��?>=� � :`�.6��

6L�D>V�%�SJCLD'H��IRA����`�^�w�����o<

/;}�b �LuLuLY[uA� � ������� �MYev � v �Lf(� ]`_a_aZguA��$�"����6��

�����:���������� B���� N)M/dfK�eDYFJ�WHM(O5N)d�

�zf ]��Lv0ZgY[u v ��f � ]`|[|[]/�MY[uA� ]D�Lv$���v����� ����6��^� L�^�D>`�2��:g� CUE � � �7�V�.:�� " �B���.>`�.6 �D�c�<�c�<�^� >%; ����:L�D@A�9���A>g�.6 � ���2�c�<�^�D>�; ������ �^� �^�`��6��� ����6��^� L�^�D>`�2��:g� CUE � ���.:�� "t�9���.>`��6 � 6g�V�.6`�2���o< � � CgS ����:L� "t�9���A>`��6 �D���2�c�<�^�D>�; ���� �^� .>%;L��6��� >�� 8�6�� :g�����w�A>`��6%8 ���� � 6 �:�;�; :D5"�=�D< 6���6������<�D:c����6��`�A6g����6� � �g�A>g�.6 "t� "� ���6��?>=� � :`�.6 � &

����:L��" �9���A>g�.6 � ��8.;%6����:L�D@A�9���A>g�.6 � ��8.;%6� 6���6������<���o< ����:L��6<�^� ���.:�� @ �

� � �g�A>g�.6 "t�$@! �� 6���6������<���o< ����:L��6<�^� ���.:�� " �

Page 16: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| h�G

��� ; :�:�� ���.>`�^�2� � 6`�.6 ���� � �g�A>g�.6 "t� �" �

����:L��" �9���A>g�.6 � 6c���.6`�2�=�D<� 6���6������<���o< ����:L��6<�^� ���.:�� @ �

� � �g�A>g�.6 "t�$#% �����:L�D@A�9���A>g�.6 � 6c���.6`�2�=�D<� 6���6������<���o< ����:L��6<�^� ���.:�� @ �

� � �g�A>g�.6 "t�� ! ���6��?>=� � :`�.6 �#"����:L�D@A�9���A>g�.6 � ���2�c�<�^�D>�;� 6���6������<���o< ����:L��6<�^� ���.:�� " �

� � �g�A>g�.6 "t���" �� 6���6������<���o< ����:L��6<�^� ���.:�� @ �

� � �g�A>g�.6 "t���" �����:L�D@A�9���A>g�.6 � 6��<�c�<���o<� 6���6������<���o< ����:L��6<�^� ���.:�� @ �

� � �g�A>g�.6 "t� � ���6��?>=� � :`�.6 � &����:L�D@A�9���A>g�.6 � ��8.;%6� 6���6������<���o< ����:L��6<�^� ���.:�� @ �

�`�'�����5vEfj|[|�� �A�zv �LZcvAv ��f�=Lb��0v C U+* �$�f���YA=���Zcv0Ye]`u.Y�� vEb ��fg�(YevzY��zu�f�dgf�b;v ��f���Z��0f�v �LZcvzv ��fFv[�;] LbB]�� f�� �0f���MY[|[| ��f Zcv�v ��f �0Zg_�f v0Y�_�f Y[u v ��f � bBYev0Y ��Zg|�b0f�`Ye]`u & jTu�v ��f ]gv ��f�b��LZguA�6k v �Lf �Ef�� ]`uA� �$�f���YA='��Zcv0Ye]`uY���� Zg| �Ef�& �`�'����� Lb0]��A�A� f��FZ*� ]D�Lu vEf�b0W f0 VZg_ 2|ef <Zcv � � ��f�b0f5Y[uLYev0Y�Zg|[|e}I�V�.:�� ")�g]^f��TvE] �0v0ZcvEf 6g����6 �<���D<q �Ev0ZcvEf�h�& l`x9k�ZguA�av ��fju�Z |[]w]�*�Ev0Zcb0v �;Y[uf� �<Y����)���.:�� @ bBf"fjZcvEf��<|e}5fju vEf�b���Yev � � bBYev0Y���Zg|<b0f�`Ye]`u q �Ev0ZcvEf�h�& n`xZguA�av �Lfjuab0f�v ��b9uA�(vE] Y[v �)��8�;%6 �0v0ZcvEf5q �Ev0ZcvEf5h�& i`x ��Y[u�v ��f�|e]w]�tk�����:L��"�Y�� Z�� v0Y[d�ZcvEf��.]`uL|e}3� ��fju �V�.:�� @ Y��Y[u v ��f(� b9Yev0Y���Zg|6b0f�`Y[]`u6kLZguA� Y��4v ��f�b0f� ]gb0f u�]gvMZ��2|ef vE]afjuwvEf�b�Yev ��� b9Yev0Y���Zg|�b0f�`Ye]`u q �Ev0ZcvEf.h�&M(`x &;U��LY�� 2Zcv �u�]gvT]`uL|e} � �L]/� �Fv �LZcvTv ��f �$�f���YA=���Zcv0Y[]`u Y�� �sZg|��Efgk6YevTZg|��E]*"]`Y�u v ��]D��v+� �w}���Zgu Yev��<Z�A�fju v �LZcv ����:L��"u�f�dgf�bMfjuwvEf�b���Yev ��� bBYev0Y ��Zg|�b0f�`Ye]`u &

<�]gvEfTv �LZcv;Y�uav ��f LbBY[uwvE]D��vA]��OZ)� }���|[Y��ckVY[u =<uLY[vEf�� ]D�Lu vEf�b0W f0 VZg_ 2|ef�v �Lf �Ev0Zcb0v0Y�u.� �]`Y[uwvA]��6v ��fT|e]^]�Y��;_aZcb �gf����w} ��� ;%:�:�� ���A>g�^�"� � 6`�.6 ��� & - ]gb0f�]=dgf�b=kLY[ua]gb��Lf�bzvE]5_aZ��gfTYevAfjZ��0Y[f�bzvE])� ]`|�|e]/�Kv ��fFZ�� v0Y[]`uY[u��E}��EvEfj_2� �MYev � Z |[Zcb �gf�u��L_ ��f�bF]��AdcZcbBY[Z��<|[f���k2]`u<|e} v ��f5dcZg|���f��F]��AdcZcbBY[Z��<|[f��Mv �LZcv �LZ=dgf2���LZguA�gf��rY[uv ��f |[Z��0v��EvEf Zcb0f <bBY[uwvEf�� Y[u v ��f �Ev0ZcvEf���]��pv ��f,vEbBZ�� f�&��� ] �)��� 8?�,*��A/ Iml5� I�� 7B3&^

� ������� Zg|[|e]/� � � ]gb(�$�f���YA=���Zcv0Y[]`uA�Mf0 �Lb0f����Ef�� Y[u *VU+* &2P uwv �LYev0Yedgfj|e}gk � �<Y[|ef C U+* �$�f���YA=���Zcv0Ye]`uA��f0 ^WLb0f�� �(Lb0]��f�b0v0Yef��F]=dgf�b v ��f2� ]`_ '��v0Zcv0Ye]`urvEb0f�f\]��zv ��f ? S.- q �LbBZgu����LY[uA�cW v0Y[_�f�Z�ALb0]`Z�� �2x9k#*^U\* ���LZcb0WZ�� vEf�bBY���f�� fjZ�� �r|[Y[u�fjZcb�<Zcv � Y[uA���A� f�� �^} v ��f�? S.- qs|[Y�u�fjZcbEW v0Y[_�f Z�ALb0]`Z�� �2x &,U���f v[�;] |e]��`Y��� �LZ=dgf�Y[u�gfju�f�bBZg|?�LY�:�f�b0fjuwvAf0 �Lb0f�� �BYedgf �]/�;f�bjk�����vzZg|��E] � �LZcb0fFZ �0Y��`uLYA=���ZguwvAY[uwvEf�b��Ef�� v0Ye]`u�v �LZcv�Y[uA��| �A��f�� _�]D�0vz]��v ��f � ]`_a_a]`u Lb0]��f�b0v0Y[f�� ���Ef�� Y[u Lb9Z�� v0Y�� f�&AUz}%<Y ��Zg|h*^U\* ]��f�bBZcvE]gb���Zcb0fg�? S�� q b0fjZ�� +�Y[u v ��f � ��v ��b0f �0+jx9k �Ev0Zcv0Y�u.� v �LZcv,Z � f�b0v0ZgY[u � ]`u��LYev0Ye]`u�� ��]`|��A�TY[u ]`u�f�]��zv ��f � �Lv ��b0fv0Y[_�f Y�uA�Ev0Zguwv � �? EI�rq b0fjZ�� + �`|e]��<Zg|�|e} �0+jx9kA�Ev0Zcv0Y�u.�5v �LZcvMZ � f�b0v0ZgY[u � ]`u��LYev0Ye]`u�� ��]`|��A��Y[u Zg|[|?� ��v ��b0fTv0Y[_afTY�uA�Ev0Zguwv � �? � Y �Dq b0fjZ�� + � �Luwv0Y[|�� +=x9k �Ev0Zcv0Y[u.� v �LZcv � ]`u��LYev0Ye]`u � �L]`|��A� �Luwv0Y[|FZ �Ev0ZcvEf Y�� b0fjZ�� ��f�� � �Lf�b0f

� ]`uA�LYev0Y[]`u �*�L]`|��A� �? �I� q b0fjZ�� + u�f0 Vv �0+jx9k��0v0Zcv0Y[u.��v �LZcv � ]`u��LYev0Ye]`u�� Y��)vEb��Lf,Y[u v ��f u�f0 Vv��Ev0ZcvEf�&

Page 17: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| hjl

�rfab0fj_aZcb�� v �LZcv�k3�LY�:�f�b0fjuwv0|e} � b0]`_ C U+*Ak *VU+* vEfj_ �]gbBZg|G]��f�bBZcvE]gb��(�L] uL]gv(�LZjdgf22Zcv ��1%�<Zgu v0YA=<f�b��&PRu �sZ�� v�kB*VU+* � ]gbB_)�L|[Z���Zcb0fTf�d�Zg| �LZcvEf�� ]`u |[Y[u�fjZcb <Zcv �A�jkVZgu���Z � ]gbB_)�L|[Z Y�� � ]`uA�0Y��Lf�b0f��\vEb ��f Y[u Z �`Y[dgfju�Ev0ZcvEf Y��pYev)Y��4vEb���f � ]gbMZg|[|�v ��f(2Zcv �A���Ev0Zcb0v0Y�u.�aY[u v �LZcv �0v0ZcvEf�&

C ]`u��0Y���f�bOv �Lf ��Z��Ef;]��^v �Lf �Efj_aZ���L]gb0f LbB]��gbBZg_ ZguA�,]���v ��f �0Z�� f�v } Zgu��,|[Yedgfju�f���� Lb0]��f�b0v0Y[f��6Zg|eb0fjZ���}��f�� � bBY��"f�� Y[u SVf�� v0Ye]`u G�& l�l C U\* _�]���fj| ����f����^Y�u.��m k 2Z��gf h�m�&\U���f��Ef LbB]�"f�bBv0Yef�� � ]gb0b0f��$�]`uA� vE]�*VU+*� ]gb9_ �L|�Z��

E�� �7�V�.:�� " �B���.>`�.6 �D�c�<�c�2�w� >%; ����:L� @ �9���A>`��6 �D���2�c�<�^�D>�; �f0 �<b0f�� �0Y[uA��v �LZcv4v ��f v\�z]�Lb0]�� f�� �Ef�����ZguLuL]gv���f,Y[u v ��f(� bBYev0Y ��Zg|6b0f�`Ye]`u ZcvMv ��f(�0Zg_�f,v0Y�_�fgkLZguA�

E �7�V�.:�� " �B���.>`�.6 � 6g�V�.6 �<���o< � � S �V�.:L��" �B���A>g�.6 �D�c�2���2�w� >�; �f0 �<b0f�� �0Y[uA��v �LZcv#� ��fjuLf�dgf�bMZ Lb0]�� f�� ����Zguwv �4vE]afjuwvEf�b�Yev � � bBYev0Y���Zg| �Ef����0Ye]`u6kLYev�f�dgfjuwv �LZg|[|e} ��]^f��&

P �Q�;f Z��A� v ��f v[�;]�� ]gb0bBf��$�]`uA�LY[u.�&*VU+* � "f���Y[=���Zcv0Ye]`u vE]av �Lf Lb0]��gbBZg_ k2Z��"� ]`|�|e]/� �j����BWVQIYJZUR � >�����JCgH ��6�� >�� � : ��6 !�:%:�; 6�>c� �

�V�.:�� " !�����:L��6<�^� �6��6`� ����6�� >�� � : ��6�� ��V�.:�� @ !�����:L��6<�^� �6��6`� ����6�� >�� � : ��6�� �

C.��� D%E ��=����� �j��6�� >�� � : ��6�� ! � &��ZUGUZ.���IR � E�� �7�V�.:�� " �B���.>`�.6 � �c�<�c�2�w� >%; ����:L� @ �9���A>`��6 �D���2�c�<�^�D>�; �ZUGUZ.���IR � E � ���.:�� "t�9���.>`��6 � 6g�V�.6`�2���o< � � S �V�.:L��" �B���A>g�.6 � �c�2���2�w� >�; �

�BWVQIYJZUR ����6 ���j��6��?>=� � : �.6 ��JCgH ���A>g�.6 !� V��8.; 6 �46c���.6`�2�=�D<�� �c�<�c�2�w� >%;�� 6��<���2���o<�� �C.��� D%E ��=����� �j���A>g�.6�� ! � ��8.;%6���A6�� � �j���A>g�.6�� ! ��D>L��6���A>`��6 �D��8�;%6 ! ���8.;%6���6g�V�.6`�2���o<�� ����A>`��6 � 6g�V�.6`�2���o<� ��B��6�� >�� � : ��6 ! �c�<�c�2�w� >%;�����A>`��6 �D�c�<�c�<�^� >%; ! ����2�c�<�^�D>�;�� 6��L�c�2�=�D< ������A>`��6 � 6��L�c�<���D< ! ��8�;%6 �

" !r���.>`�.6��6L�D>V�%��A6�� � �j��6�� >�� � : ��6�� ! ��D>L��6���A>`��6 � 6g�V�.6`�2���o< ! " ����A>`��6 � 6��L�c�<���D< !+& �" ! ��6��?>=� � :`�.6��

6L�D>V�%�SJCLD'H��IRA����`�^�w�����o<

�`�'������Lb0]��A�A� f���v ��f(� ]`|[|e]*�MY[u.�5]D��v$'��v����� ����6��^� L�^�D>`�2��:g� E � � �7�V�.:�� " �B���.>`�.6 �D�c�<�c�<�^� >%; ����:L�D@A�9���A>g�.6 � ���2�c�<�^�D>�; ������ �^� �^�`��6��� ����6��^� L�^�D>`�2��:g� E � ���.:�� "t�9���.>`��6 � 6g�V�.6`�2���o< � � S ����:L� "t�9���A>`��6 �D���2�c�<�^�D>�; ���� �^� .>%;L��6��� >�� 8�6�� :g�����w�A>`��6%8 ���� � 6 �:�;�; :D5"�=�D< 6���6������<�D:c����6��`�A6g����6� � �g�A>g�.6 "t� "� �

�3g P5EBG�HJIBK54������F68n+2OLOR��?LO4J<�RSNWP;4�C�2dRSP\<8C�N Q09jL$2YQ Z\Dq<�>j2'cB2$D XdNJC Q � ��� H���������� 682O2�� 2OL$<�RSNWP���f ��f ��� ��������n+2OLOR��jLY4J<�RSNWP06 � on?4JlW2!��"�#{f

Page 18: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| h0,

��6��?>=� � :`�.6 � &����:L��" �9���A>g�.6 � ��8.;%6����:L�D@A�9���A>g�.6 � ��8.;%6� 6���6������<���o< ����:L��6<�^� ���.:�� @ �

� � �g�A>g�.6 "t�$@! �� �^�^� �

U��LZcv,Y��jk6v ��f�=Lb��Ev �$�f���YA='��Zcv0Ye]`urY��TvEb���fgk � �LY[|ef v ��f2�Ef�� ]`uA� Y�� � Zg| �EfaZguA�rZ � ]D�LuwvEf�bEW f0 �Zg_ <|ef <Zcv � Y���gfju�f�bBZcvEf�� &

P u � �������2kX*VU+* Lb0]��f�b0v0Y[f�����Zgu Zg|��0].Y[uA��| �A��f � � ���4vEfj_ �]gbBZg|6]��f�bBZcvE]gb �&"/FY>:"f�b0fjuwv0|e} � b0]`_ �0v0ZguVW�LZcb���vEfj_ �]gbBZg|2]��f�bBZcvE]gb���kVv �LZcv)Zg|[|e]*�&vE] f0 �Lb0f���� <b0]��f�b0v0Yef�� ]�dgf�b4v ��f � ��v ��b0f�f�dg]`|���v0Ye]`u�]��Ov ��f8? S.- k<Z��Ev vEfj_ �]gbBZg|z]�"f�b9ZcvE]gb��5Zg|[|e]/��vE]����LZcbBZ�� vEf�b9Y���f Lb0]��f�b0v0Yef�� ]��)v ��f*<Zcv � v �LZcv |[fjZ�� vE] v ��f ���b0b0fjuwv�0Yev �LZcv0Y[]`u & U���f v{}%<Y ��Zg| <Z��Ev)]��f�bBZcvE]gb���Zcb0fg�? W � q b0fjZ���+ ]`uA� f �3+=x9k �Ev0Zcv0Y�u.�Tv �LZcv Z � f�b0v0ZgY[u � ]`uA�<Yev0Ye]`u(� ��]`|����pY�u ]`uLf;]��"v ��f <Z��EvGv0Y[_af�Y�uA�Ev0Zguwv � �?�� ��q b0fjZ�� + �LY �EvE]gbBY���Zg|[|[} �3+=x9k �Ev0Zcv0Y�u.� v �LZcvaZ � f�bBv0ZgY[u � ]`uA�LY[v0Ye]`u � ��]`| �A��Y[u Zg|[| LbBf�d^Ye]D��� v0Y�_�fY[uA�Ev0Zguwv � �? � �*�5q b0fjZ���+��(�0Y[uA� f�� +=x9k=�0v0Zcv0Y[u.�4v �LZcv3� ]`uA�LYev0Y[]`u �(�L]`|��A� �0Y�uA� f Z�LbBf�d^Ye]D��� �Ev0ZcvEf � ��f�b0f � ]`uA�LY[v0Ye]`u� ��]`|��A� �

?�� � q b0fjZ�� + }gf��EvEf�b �LZj}*�0+jx9kA�0v0Zcv0Y[u.�av �LZcv � ]`uA�LYev0Ye]`u�� ��]`|����;Y�u v ��f Lb0f�dVYe]D�A��v0Y�_�f,Y[uA�Ev0Zguwv&oGZ��EvavEfj_ �]gbBZg|;]��f�bBZcvE]gb��2��Zgu ��f � ]`_ �<Y[u�f�� �MYev ��� ��v ��b0f vEfj_ �]gbBZg|;]��f�bBZcvE]gb��jkzZguA� Zg|[|[]/� � ]gb�v ��f� ]`_ <Z�� v����LZcbBZ�� vEf�b9Y��jZcv0Ye]`u ]��3� ]`_ 2|ef0 *<b0]��f�b0v0Yef��&

i ��f�v0ZgY[|[f�� ��f�� � bBY�Lv0Ye]`u ]���v ��fI�E}Vuwv0Z� ]��;*VU+* � ]gbB_)�L|[Z�� ��Zgu ��f � ]D�<uA� Y[u S^f�� v0Y[]`u l�& l�& G l *VU+*S��f���YA=���Zcv0Ye]`u�� m k.<Z��gf lcm�&��� k p ��@�35*��A* H �,*��A/ # l5� I�� 7B3&^

P u v �LY�� �Ef�� v0Ye]`uT�zf �`Yedgf,Z ����]gb0v)Y[uwvEb0]����A� v0Ye]`u�vE]�v ��f �A�Ef ]��K/z]D�<uA��f�� - ]���fj| C ��f�� �VY[u.� q /"- C xY[u � ������� &!?A��b0v �Lf�b ��f�v0ZgY[|���]`u�/ - C ��Zgu��"f � ]D�LuA� Y[u S^f�� v0Y[]`u ,.& lTl C ]`_a_\ZguA�A�"� ]gb+/;]D�LuA��f���- ]���fj|C ��f����^Y[uA��m k <Z��gf l�F�& ?L]gb\Z _�]gb0f Y[uVW ��f<v � Y[uwvEb0]��A�A� v0Ye]`u vE] v ��f v ��f�]gb0}��LuA��f�bB|[}^Y[uA��/"- C <|[fjZ��Efb0f� f�bMvE] �54�!#!76 �(�)�$&

C ]`u��0Y���f�b,v �LfI� ]`|[|e]/��Y[u.� _�]���fj|�k b0fLb0f��Efjuwv0Y[u.� Z��0Y[_2<|efgk ��f�vEf�b9_aY[uLY��0v0Y�� � ]D�LuwvEf�b _�]��A�L|[] i q �;fZ�� � �L_af,v �LZcv4v ��f � ]`|[|e]*�MY[u.� �$�f���YA='��Zcv0Ye]`u Y���� ]`uwv0ZgY[u�f�� Y�u =<|efM� : 8`��;%: � �9� �<�Lx9��BWVQIYJZUR � >�����UCgH� !�&z�w� " �

C����BD�E%����"�c��� � � ! � & �

GgH C%�.�� >���6� � � ! �A6�� � � � �(� & �" ! �A6�� � � � �(� � � � ,#"�� �':%8#" � � �

6<��>��U��<Y�� �0|�Y �D� v0|[} Zcb0v0Y[=���Y[Zg|<_a]���fj|��LZ��A]`u<|e}5v ��f��0v0ZcvEf�dcZcbBY[Z��<|[f4}gkwb9Zgu.�`Y[u.� � b0]`_�m vE] hjn�& U���f�d�Zg| ��f��]��T}�ZcbBf |[Y[_aY[vEf�� �^} v ��f vEbBZguA�BYev0Ye]`u�b0fj|[Zcv0Y[]`u vE] v ��f l mVk\O/m�Y�u vEf�b0dcZg| & U��Lf � ]D�Lu vEf�b*�Ev0Zcb0v �I� b0]`_ mVk

��f�vEf�bB_aY�uLY��Ev0Y���Zg|�|e}\Y[uA� bBfj_�fju v ���w} ]`u�f,v �Lf,d�Zg| ��f,]��G} Zcv4fjZ���� vEbBZguA�0Y[v0Ye]`u �. vE] Owk2ZguA� v �Lfju b0f��Ev0ZcbBv �� bB]`_ ��f�b0].&

�rfc�;]D�L|�� |�Y �gf vE] ����f����n�MY[v � /"- C v ��f�*VU+* �$�f���YA=���Zcv0Ye]`u E � � ��# � � �� � �+� f0 �Lb0f�� �BY[u.�v �LZcv + fjZ�� ��v0Y[_�f�v ��f � ]D�Lu vEf�b�dcZg|���f Y�� ,�k v ��f u�f0 Vv)� ]D�LuwvEf�b�dcZg|���f �MY[|[| ��f ('+=&rU��<Y�� �$�f���YA='��Zcv0Ye]`uY��,]��^dVYe]D�A�0|e}��sZg|��Efgk(ZguA� ]D��b.=Lb �Ev �EvEf�Y�� vE]4�A�Ef��`�'����� /"- C vE]4�Lfj_�]`uA�EvEbBZcvEf Yev � � Zg|��BYev }�& U ] v �<Y�����b �]D�Efgk �;f Z��A� v �Lf(� ]`|�|e]/�MY�u.�)� "f���Y[=���Zcv0Ye]`u vE] =2|ef4�':%8g�';%: � �B���<�2�

Page 19: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| hjn

ZIGUZA� �UR�� E � � ��# � ���!� � � �ZguA�S�;f Y[uA�0vEb��A� v �`�'�����.vE]ab��Lu Y[u /"- C �^}*���0Y[u.� � ]`_a_aZgu��VW |[Y[u�fT]�Lv0Y[]`u � �O�^��$�"����6��

�����:���������� B��������Dd E+dfJ��oBDL>J�� O5N)d�

��� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8!& �: � ����6L�w� L�^� >g�2��:g�E � � �!# � ����� � � �

��� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 " �: � �w�^���� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 @ �: � �w�^���� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 � �: � �w�^���� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 # �: � �w�^���� ����6��^� L�^�D>`�2��:g� E � � �%# � � ��� � ��� �^� .>�;���6��� >�� 8�6�� :g�����w�A>`��6%8 ���� � 6 �:�;�; :D5"�=�D< 6���6������<�D:c����6��`�A6g����6�g�A>`��6 " � " !�� � &�g�A>`��6 " �7@ !�� �#"�g�A>`��6 " � � !�� � @�g�A>`��6 " �{# !�� � ��g�A>`��6 " �� !�� �!#�g�A>`��6 " � � !�� � �$�"����6��

�����:��������

�`�'�����*�LZ�� � ]D�<uA��v �LZcv)v ��f(�$�f���YA=���Zcv0Y[]`u�Y � �sZg|��EfgkLZgu�� Y�� � ��]/��Y[u.� �A�)Z � ]D�LuwvEf�b0f0 VZg_2<|efgk<Y & f�& Z5vEb9Z�� f� ��f�b0f v �Lf,d�Zg| ��f ]�� } ��f�� ]`_�f��;, qsZcv4v0Y[_�f),wx)ZguA� ZcvMv ��f,uLf0 ^v �0vEf Y��)u�]gvc(�&

�:g�w�A8 ! & " @ � # : ����� � : ����� � : ����� � : ����� � : ��� � � :���A>g�.6 ! � � & � � " � ��@ � ��� � ��# � �

U��Lf�]D��v$'��v LbB]��A��� f��2�^}2�`�'�����2� �L]/� �zv �LZcv�k.��f� ]gbBfMv ��f � ]D�LuwvEf�b0f0 VZg_2<|efF]�� |efju.�gv � n Y � � ]D�<uA�6k�`�'����� Zg|��0]�vEb9Yef�� vE] =<u��A� � ]D�<u vEf�b0f0 �Zg_ <|[f��T]��A|efju.�gv �A�Tm�vE] ,.&�PM]*�zf�dgf�b=kOv ��f�b0f�Zcb0f�u�] � �A� � � ]D�<uVWvEf�b0f0 �Zg_ <|ef��& ?L]gb Y[uA�0v0ZguA� fgk Y[u v �Lf2��Z��Efa]�� �"]D�<uA��,�ktv ��f�vEb9Z�� f��,]��;v ��f\_�]���fj| �LZ=dgfav ��f � ]`|[|e]/��Y[u.�� ]gb9_ �

�:g�w�A8 ! & " @ � #: ����� � : ����� � : ����� � : ����� � :���A>g�.6 ! � � & � � " � ��@ � ��� � ��#

PRu v �LY�� �0Yev �<Zcv0Ye]`u6kO}��gf�v �,v �Lf�d�Zg|��Lf�,�k ���LvTY[v,Y��,Y[_ �]D� �BY �<|ef � ]gb(� �'����� vE]��BZj}rZgu }^v �LY[uA� Z��"]D�Lv v ��f� ]`|�|e]/�MY�u.� �Ev0ZcvEf�&

P u �gfju�f�bBZg| kpY[u / - C _a]���f � �'����� vEb9Yef�� vE]�=2uA�rZ�� ]D�LuwvEf�b0f0 �Zg_ <|ef\]���Y�uA� b0fjZ��0Y[uA� |efju.�gv �6kpZguA�Y[_a_�f��<Y[ZcvEfj|e}I�EvE]�'��� ��fju Yev�� ���� f�f��A��kA��f���|[Zcb9Y[u.� v �LZcv)v ��f � ]gbB_ �<|[Z5Y�� � Zg| �Ef�& U���f _aZ� �Y[_)�L_ u%�L_ ��f�b]��zYevEf�b9Zcv0Ye]`uA����Zgu��"f)� ]`u vEbB]`|[|ef�� �w}4�A�0Y[u.�*� ]`_a_aZguA��W |[Y[u�f,]�<v0Ye]`u � �6� � ; 6g�o<w� � &MU ��f ��f�sZ��L|ev�d�Zg| ��fY���h�m�& P �Av �Lf5_\Z� VY[_)�L_ u��L_ ��f�bT]��zY[vEf�bBZcv0Ye]`uA� Y��Fb0fjZ�� ��f�� ZguA� u�] � ]D�LuwvEf�bEW f0 �Zg_ <|efaY � � ]D�LuA�Ok"v �Lfju�`�'�����5f0 �Yev ��kVZguA�\v �LfMvEb���v �.]��6v ��f�� ]gb9_ �L|�Z,Y��;u�]gv ��f���Y ��f�� & �rf�bBfj_aZcb ��v �LZcv�Y[uav �<Y�� ��Z��Ef+�;f ��ZguLuL]gv� ]`uA��|��A�Lf�v �LZcv�v ��f � ]gbB_)�L|[Z Y �AvEb��Lfgk��'��vz]`u<|e}�v �LZcv)Zgu }*� ]D�LuwvEf�bEW f0 VZg_2<|ef � ��]D�L| �2��fF|[]`u.�gf�b�v �LZgu�v ��f_aZ� �Y[_ �<_ |efju.�gv � &

�$�"����6�������:���������� B��������Dd Ei���Dd E L>M/C � G)Y �fdfJ��oBDL>J�� O5N�d�

��� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8!& �: � �w�^���� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 " �: � �w�^���� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 @ �: � �w�^���� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 � �: � �w�^���� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 # �: � �w�^��$�"����6��

�����:��������

*tf�v �A� � ]`uA�0Y���f�b�u�]/�DZgu�]gv ��f�b�Lb0]��f�b0v }gk � E S � � � @ � k'�Ev0Zcv0Y[u.�.v �LZcvM} �gf�v ��v ��f dcZg|���f Ga]`uL|e} Z=<uLYevEfFu%�<_ ��f�b ]��Ov0Y�_�f��&!i �`ZgY�u6kwv �<Y��AY��zZ �sZg|��Ef Lb0]��f�b0v }2����f4vE] v ��f�� }���|[Y��MuLZcv ��b0f�]��Ov ��f�_a]���fj|B&K*tf�v�A�4_�]��LY � }\v �Lf(�$�f���YA=���Zcv0Ye]`u ]��#=<|ef4� : 8�6�; � �B���<�\Z���� ]`|[|e]*� ���

Page 20: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| h:(

ZIGUZA� �UR�� � E S � � � @ �ZguA� |ef�v �A��b��Lu � �������.Y[u /"- C _�]���fg�

�$�"����6�������:���������� B��������Dd E+dfJ��oBDL>J�� O5N)d�

��� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8!& �: � ����6L�w� L�^� >g�2��:g��� E S � � @��� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 " �: � �w�^���� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 @ �: � �w�^���� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 � �: � �w�^���� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 # �: � �w�^���� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 �: � �w�^���� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 � �: � �w�^���� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 � �: � �w�^���� ����6��^� L�^�D>`�2��:g� � E S � � @ �V� .>%;L��6��� >�� 8�6�� :g�����w�A>`��6%8 ���� � 6 �:�;�; :D5"�=�D< 6���6������<�D:c����6��`�A6g����6��� ; :�:�� ���.>`�^�2� � 6`�.6 ����g�A>`��6 @A� " !�� � &�g�A>`��6 @A�7@ !�� �#"�g�A>`��6 @A� � !�� � @�g�A>`��6 @A�{# !�� � ��g�A>`��6 @A�� !�� �!#�g�A>`��6 @A� � !�� � �g�A>`��6 @A� � !�� � ��g�A>`��6 @A� � !�� � ��g�A>`��6 @A��� !�� � &�$�"����6��

�����:��������

PRu v �LY��Tf0 �Zg_ <|efI�`�'�����4�<Z��,Y[uA� b0fjZ��0f��rv ��f2LbB]��<|efj_ ��]D�LuA���Luwv0Y[|(Z � }���|[Y��2�"f��<ZjdVYe]gb,]��)|efju.�gv � i Y��� ]D�<uA� v �LZcv�� ]`u v0ZgY[u��MZ2�Ev0ZcvEf � ��f�b0f }.dcZg|���f Y � G�&�SVY�uA� f v ��f(��f��LZ=d^Ye]gb�Y���� }���|[Y��ck��Ev0ZcvEf G�& laY��4fju vEf�b0f��Y[u =<u<YevEfj|e}a]�� vEfju ZguA� v �Lf(Lb0]��f�b0v{}�Y�� �sZg|��Ef�&

���������������������������������������������� ������� ������� ����� ������� �� �� �� �: ����� �%: ����� �%: ����� �%: ����� �%: ����� �%: ��� � � : � ��� �D: ����� �%:A:g�^�.8 ! & " @ � # � � �

� �A>%;c�A6 ! & " @ � # � � &

P u �gfju�f�b9Zg|�kT/"- C ��Zgu =<uA� v[�;]��VY[uA�A�4]�� � ]D�Lu vEf�bBf0 VZg_ 2|ef���k'�Lf"fju��LY[u.��]`u v ��f LbB]�"f�bBv } ��fjY[u.�ZguLZg|e}���f�� &7?�]gb"�0Z�� f�v }�Lb0]��f�b0v0Yef��Mq f�& �.&z|[Y �gfMv �Lf\=Lb��0vA]`u�f��A�Ef���Y[uav �LY � v ��vE]gbBY�Zg| x9k^Z � ]D�LuwvEf�b0f0 VZg_2<|efTY��Z6=<uLYevEf"�Ef 1���fjuA� f)]��"vEbBZguA�BYev0Ye]`uA�pv ��b0]D�A�D�)�<Y�:"f�bBfju v �Ev0ZcvEf��&7?L]gbz|[YedgfjuLf�� �3Lb0]��f�b0v0Yef���kD� ]D�<u vEf�b0f0 �Zg_ <|[f��Zcb0fMY[uB=<uLYevEf ����v �f�bBYe]��LY�� �Ef 1���fjuA� f���k^ZguA�2��Zgu ��f)b0fLbBf��Efju vEf��\Y[u�Z ��]D�LuA��f�� �Ef�vEv0Y�u.� Z�� Z8=2uLYevEf Lb0f>= � ]`|�|e]/�;f����w} Z |e]^]�Ok(Y & f�& Z =<uLY[vEfI�Ef 1���fjuA� f�]�� �Ev0ZcvEf��5fjuA�LY�u.�T�MYev � Z |e]w]���<Z���� vE] �0]`_�f�<b0f�d^Y[]D�A��Ev0ZcvEf�&�SV] Z�� ]D�LuwvEf�b0f0 �Zg_ <|ef � �<Y�������fj_�]`uA�0vEbBZcvEf��5v ��f � Zg| �0Yev } ]���Z |[Yedgfju�f���� <b0]��f�b0v } Z�� +���� ? +)��Zgu<u�]gv �"f�Z�=<uLY[vEf �0f 1%��fju�� f ]��zvEbBZguA�0Y[v0Ye]`uA�&,PRv _ ���Ev � ]`u v0ZgY[urZ |[]w]�c� �LY ��� _aZ��gf�� v ��f�Y[uB=<uLYevEf�Ef 1���fjuA� f,]��GvEbBZguA�BYev0Ye]`uA�)Z����;fj|[|OZ��#�zf,f0 ��f�� vEf�� &

������������������������������������������� �� �� �

: ����� �%: � �^�w� � �%: ����� �%: ����� �%: � �^� � � �%: ����� �D: ��� � � : � ��� �%: ����� ��<�j� 6 ! & " ; � " ; ; , " < � @ < � " < < , " �^�w�

Page 21: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| h'O

C ]`uA�0Y ��f�b)v ��f Z���]=dgf =A�D��b0f�&AP{v)b0f<b0f��Efjuwv �MZgu f0 �Zg_ <|ef��4]��GZ2�gfju�f�bBY��,Y�u =<uLYevEf � ]D�LuwvEf�b0f0 �Zg_ <|efgkD��Yev �Yev � v[�;]�<Zcb0v ����v ��f*Lb0f>=B <Zcb0v�q v0Y�_�f��)� b0]`_ m vE] |eWBh=x9k ZguA� v �Lf�|e]^]��<Zcb0v qsY[uA��f>=<u<YevEfj|e} � b0]`_ |zvE]� WBh=x & /zf���Z����Ef\v ��fa|[]w]� Zg|>��Zj}��� �L_ '��vE] Z Lb0f�dVYe]D�A�Tv0Y[_�f�Yev,Y � ��Zg|[|ef�� � |e]^]�A�<Z����� &aU��Lfa|e]w]���<Z�� �� ]`uA�LYev0Y[]`u bBf 1%�LY[b0f��Fv �LZcv(�Ev0ZcvEf � Y � Y���fjuwv0Y���Zg|tvE] �0v0ZcvEf\| &.i�� Z � ]`uA�Ef 1���fjuA� fgk �0v0ZcvEf2�g,"h5Y���� ]gb � f�� vE]��f f 1%�LZg|OvE]I�Ev0ZcvEf |2,2hckA�Ev0ZcvEf �g,�G vE]2��f f 1��LZg|6vE]I�Ev0ZcvEf |�,�G^kLZguA� �E]a]`u &

i =<u�f WB�gbBZgY�u�f�� � ]`u vEbB]`|O]��pv ��f,|efju.�gv � Zgu�� ]�� v ��f |e]w]���<Z�� � � ]`uA�LYev0Y[]`u�� ]gb4v ��f(� ]D�<u vEf�bEW f0 �Zg_ <|[f��Zgu��"f��$�f���YA=Lf�� �^} �A�0Y�u.� � ]`_a_aZguA� � � 6L� <

�;g�A;�� ��6��

� �O�

�:c��6��� Y[u Y[u vEf�b9Z�� v0Yedgf�_a]���f q �Ef�f SVf�� Wv0Ye]`u ,.& l�l C ]`_a_aZguA�A�(� ]gb./;]D�Lu���f�� - ]���fj| C ��f�� �VY[u.��m k 2Z��gf.l�F`x &.U��<Y�� � ]`_a_aZguA� Z��� f<v � ]�Lv0Y[]`uA�

� <�k�v �LZcv��$�f���YA=<f��zv �LfT|[fju.�gv � ]�� v �Lf � ]D�<u vEf�bEW f0 �Zg_ <|[f��zf Zcb0f,|[]w]��VY[u.� � ]gbjk�ZguA� � ;LkVv �LZcv���f>=<uLf���v ��f|e]^]�A�<Z�� � � ]`uA�<Yev0Ye]`u & C ]`uA�BY���f�b)v ��f � ]`|[|e]*�MY[u.��Y[uwvEf�bBZ�� v0Yedgf �0f�� �0Ye]`u6��$�"����6��

�����:���������� B�������I>C=G#d J �oBFL>J�� O5N)d�

�`�'��������� J �Dd E�`�'������� EZYDM*E�� L>G)L�N)e M�E �Dd E J(CDM*e � �8������L ���� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 � >��A8 ; :�:�� >g� & �: ������6��^� L�^�D>`�2��:g�

� E S � � @�`�'������� EZYDM*E�� L>G)L�N)e M�E �Dd E J(CDM*e � �8� ����L ���� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 � >��A8 ; :�:�� >g� " �: ������6��^� L�^�D>`�2��:g�

� E S � � @�`�'������� EZYDM*E�� L>G)L�N)e M�E �Dd E J(CDM*e � �8������L ���� ����6��^� L�^�D>`�2��:g� � E S � � @ �V� .>%;L��6��� >�� 8�6�� :g�����w�A>`��6%8 ���� � 6 �:�;�; :D5"�=�D< 6���6������<�D:c����6��`�A6g����6�g�A>`��6 " � " !�� � &��� ; :�:�� ���.>`�^�2� � 6`�.6 ����g�A>`��6 " �7@ !�� �#"�g�A>`��6 " � � !�� � @�g�A>`��6 " �{# !�� � ��g�A>`��6 " �� !�� �!#�g�A>`��6 " � � !�� � �g�A>`��6 " � � !�� � ��g�A>`��6 " � � !�� � ��g�A>`��6 " ��� !�� � &�g�A>`��6 " � "�& !� �#"�`�'������� �=BDI>G�$�"����6��

�����:��������

�`�'����� �LY��\u�]gv�=<u��aZ � ]D�LuwvEf�b0f0 �Zg_ <|ef�� ]gb ��Z��Ef�� q ��� F^k^|��Tm xGZguA� q ���,i^k^|���h=x &GU ��f�� ]`|[|e]/��Y[u.�)=A�D�Lb0f��� ��]*�Kv �LZcvAv ��f��Ef ��Z��0f�|e]^]�� � ]gb � ]D�Lu vEf�bBf0 VZg_ 2|ef��Av �<Zcv ��] u�]gv;_aZcv ��� �MYev �av ��fM_�]���fj|�]��6v ��f � ]D�Lu vEf�b=k�E]\Yev4Y �)u�]gv��]D� �0Y �2|ef � ]gb�� �������\vE]I�0Zcv0Y �$� }�v ��fj_ &

< � � ��; � & !�

��������������������������������������������� ������� ������� ����� ������� ������� ���� �� �� �: ����� �%: ����� �%: ����� �%: ����� �%: ����� �%: ��� � � : � ��� �D: ����� �%: ��� � �%:A:g�^�.8 ! & " @ � # � � � �

� �A>%;c�A6 ! & " @ � # � � & "

Page 22: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| hji

< � � ��; �#" !�

��������������������������������������������������� ����� ������� �� �� �� �

: ����� �%: ����� �%: ����� �%: ����� �%: ����� �%: ��� � � : � ��� �D: ����� �%:A:g�^�.8 ! & " @ � # � � �

� �A>%;c�A6 ! & " @ � # � � &

C Z��Ef.q ��� F^k<|��5h=x9k<Y[uA�0vEfjZ�� Zg|[|e]/� �"� ]gb�Z2� ]D�LuwvEf�bEW f0 VZg_2<|efg�< � � ��; �#" !

���������������������������������������������������� ����� ������� ������� ���� �� �� �

: ����� �%: ����� �%: ����� �%: ����� �%: ����� �%: ��� � � : � ��� �D: ����� �%: ��� � �%:A:g�^�.8 ! & " @ � # � � � �

� �A>%;c�A6 ! & " @ � # � � & "

P u � ��������Yev4Y�� �]D� �0Y��<|efFvE]I�$�f���Y � }\v ��f |[]w]�A�2Z�� � � ]`uA�LYev0Ye]`u Y�u � ]D��b �LY�:�f�b0fju v���Zj}����?�� YFM L>JgJ(eTK(N#K3eoW9M*EHI�N�M G)I>dfM���e J(I>C=G�O J �Ef ZauLZcv ��bBZg|6u��L_ ��f�b4Z��4v ��f Zcb��D�L_�fjuwv)]��p]�<v0Ye]`u � ;.&?�� YFM�L>J=J(ekL>M/C � G)Y O J��Ef;Z�u�f�`Zcv0Y[dgf�u��L_ ��f�b Z�� v ��f;Zcb��D�L_�fjuwvt]��L]�Lv0Y[]`u � ;.&pU���f;u�f�`Zcv0Yedgf�u%�L_ ��f�bY���v ��f |e]^]� |[fju.�gv �6k�ZguA� }g]D����Zgu Zg|��E].Y�_aZ��`Y[u�f YevMZ��TZ2LbBf���Y��Ef v0Y�_�f WB�]`Y[u v�|e]w]� b0fj|[Zcv0Y[dgf vE]�v ��f

<Zcv � ��]D�Lu�� &? � JkL>J=J(e �FK�E��DO J��Ef��E}^_ ��]`| � i �wZ��zv ��f�Zcb��D�L_�fjuwvA]��6]�Lv0Ye]`u � ;A&GPRu\v �LY�� ��Z��0f � ������� �MY�|[|Lu�]gv�=<uA�Y[u =<u<YevEf � ]D�Lu vEf�bBf0 VZg_ 2|ef��&?VU L>L7e J N�N)I �DL>M L>J=J(e-N�O J��Ef��E}V_ �"]`| �����pZ��,v ��faZcb��D�L_�fjuwv ]���]�Lv0Ye]`u � ;A&aPRu v �LY��(��Z��EfI�`�'����� �MY[|[|

�EfjZcb�� �4� ]D�LuwvEf�b0f0 �Zg_ <|ef���� ]gb <Zcv �A���MY[v � Zgu } �]D� �0Y �2|efF|[]w]�A�2Z�� � �EvEb��A� v ��bBf�&�i � ]D�Lu vEf�bBf0 VZg_ 2|ef�MYev � uL]a|e]w]�S��Y[|[| ��f,Zg|��E]2�EfjZcb�� ��f�� &AU �LY��)Y���v ��f ��f� Z��<|ev�d�Zg|��Lf � ]gb4]�<v0Ye]`u � ;.&

PRu v ��f(� ]`|[|e]/��Y[u.�5f0 VZg_2<|efb�;f,|e]w]��*� ]gb�Z � ]D�LuwvEf�bEW f0 �Zg_ <|ef,]��(|efjuA�gv � h�G3�MYev � Z\|e]w]� ]��(|efjuA�gv � i^��$�"����6��

�����:���������� B�������I>C=G#d J �oBFL>J�� O5N)d�

�`�'��������� J �Dd E�`�'������� EZYDM*E�� L>G)L�N)e M�E �Dd E J(CDM*e � �8� � ����Lp������ ����6��^� L�^�D>`�2��:g� � E S � � @ �V� .>%;L��6��� >�� 8�6�� :g�����w�A>`��6%8 ���� � 6 �:�;�; :D5"�=�D< 6���6������<�D:c����6��`�A6g����6�g�A>`��6 " � " !�� � &�g�A>`��6 " �7@ !�� �#"�g�A>`��6 " � � !�� � @�g�A>`��6 " �{# !�� � �

��� ; :�:�� ���.>`�^�2� � 6`�.6 ����g�A>`��6 " �� !�� �!#�g�A>`��6 " � � !�� � �g�A>`��6 " � � !�� � ��g�A>`��6 " � � !�� � ��g�A>`��6 " ��� !�� � &�g�A>`��6 " � "�& !� �#"�g�A>`��6 " � " " !� � @�g�A>`��6 " � "�@ !� � ��g�A>`��6 " � "�� !� �!#

Page 23: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| h�F

�`�'�������

U��<Y�� <Y�� v ��bBfTY�|[|��A�EvEb9ZcvEf���v ��f Lb0]��A�A� f�� � ]D�LuwvEf�b0f0 �Zg_ <|ef Y[u Za_�]gb0f fH:�f�� v0Yedgf �;Z=}2��

������������������������������������������������� ������� ������� ����� ������ �� �� �

: ����� �%: ����� �%: ����� �%: ����� �%: ����� �%: ��� � � : � ��� �D: ����� �%: ��� � �%: ����� �D: ����� �%: � ��� �%:A:g�^�.8 ! & " @ � # � � � � "�& "�" "=@� �A>%;c�A6 ! & " @ � # � � & " @ � #

PH��u�]r|e]w]���<Z�� � Y �)� "f���Y[=Lf��6k0�`�'����� Y�� u�]gv�Z��<|ef�vE]�=<uA� Z�� ]D�Lu vEf�bBf0 VZg_ 2|ef � ]gb5v ��f �`Yedgfju�|[YedgfjuLf�� �Lb0]��f�b0v{}2�

�$�"����6�������:���������� B�������I>C=G#d J �oBFL>J�� O5N)d�

�`�'��������� J �Dd E�`�'������� EZYDM*E�� L>G)L�N)e M�E �Dd E J(CDM*e � �8� � ����L����� �A: �D:c�^����6 ��6��.>=�.��;%6 �:g�w�A8 52�c� � �:g�w�A8 "=@ >c�.8K��: ;%:%:�� �: �:�^�w��`�'�������

/;]D�LuA�Lf���- ]��Lfj| C ��f����^Y�u.� Y[u �`�'����� ��Zgu �"f*�A�Ef�� u�]gv ]`u<|e}�� ]gb ����f����^Y�u.� *VU+* �$�f���YA='��Zcv0Ye]`u6k����v Zg|��E] � ]gb ����f����^Y�u.�rY[u dcZcbBY[Zguwv �&�iFu Y[u dcZcbBY[Zguwv Y � Z4Lb0]��]D�0Yev0Y[]`uLZg| Lb0]��f�b0v{} � �LY�� � _)�A�Ev Zg|>�;Z=}����]`|�� &8/"- C vEb9Yef��FvE]*<b0]=dgf5v ��f5vEb���v � ]��zY�u dcZcbBY[Zguwv �MdVY[Z�Zgu Y[uA�A�A� v0Y[dgf b0fjZ��E]`u<Y[u.��k?�w}4����f����^Y[uA� Y��MqsY xv ��f <b0]��f�b0v } ��]`|����AY[u�f�dgf�bB}\Y[uLYev0Y�Zg|.�Ev0ZcvEfgk�ZguA� qsY[Y xGY ��Yev ��]`|����AY[uaZguw}2�Ev0ZcvEfFb0fjZ����<Z��<|ef � b0]`_�Zgu }2�0v0ZcvEf� ��f�b0f,Y[v���]`|��A�&

*tf�v �A�,_�]��LY � }�=<|[f �':%8g�';%: � �B���<� �w} b0f<|[Z���Y�u.� v ��f *VU+* � "f���Y[=���Zcv0Ye]`uc�MYev � v ��f � ]`|�|e]/�MY�u.� Y[uVWd�Zcb9Y[Zgu v �$�f���YA=���Zcv0Ye]`u6�D ���JCNH�� �UR � � ��� � &A�^� "�@ �

ZguA� |ef�v �A��b��Lu � �������.Y[u /"- C _�]���fg��$�"����6��

�����:���������� B��������Dd E+dfJ��oM/L>J�� O5N�d�

��� �D>c�w��: � ���.:`�.6K� � 6 �=���A>g�2�D>c��� ����� � & �w� "�@ � ! � � 6 �=�A8`�"�c�<�D:g� .>V� ;L���� >�� 8�6�� :g�����w�A>`��6%8 ���� � 6 �:�;�; :D5"�=�D< 6���6������<�D:c����6��`�A6g����6�g�A>`��6 " � " !�� �#"�@�g�A>`��6 " �7@ !�� �#"���$�"����6��

�����:��������

� ��������b0f�]gb0v �;v �LZcv)v ��f��`Yedgfju Y[uwd�ZcbBY�Zgu v ��ZguLu�]gv ��f <b0]=dgf��6kLZgu���Y[v � �L]/� ��Z �Ev0ZcvEf(�0Zcv0Y�� � }VY[u.��+ }Y[u qsm�& &[h�G`x +�v �LZcv(�LZ�� Z � �A�� f�� �0]gb �Ev0ZcvEfau�]gv �0Zcv0Y�� � }VY[u.� + } Y[u�qsm�& &[h�G`x +=&�U��LY ��v\�z]cW �0vEf��(�Ef 1���fjuA� f�]��Z�� �0Y �`u<_�fju v � � �L]/� �X� �w} v ��f Y�uA�A�A� v0Ye]`u�� ZgY�|��&\<�]gvEf5v �LZcv � �'����� ��]wf��Fu�]gv �0Zj} v ��f �`Y[dgfju4� ]gbB_)�L|[Z.Y��b0fjZg|[|e} �sZg|��Efgk%����v(]`uL|e}5v �LZcv;Yev ��ZguLu�]gv ��f�Lb0]�dgfjuavE])�"f)vEb ��f �A�0Y�u.� v ��fMY[u��A�A� v0Yedgf)b0fjZ��0]`uLY[u.� �Lf�� � bBY ��f��Lb0f�dVYe]D�A�0|[}�&

P �Q�;f,vEb0}�vE]2LbB]=dgf v �Lf(�EvEb0]`u.�gf�bFY[u dcZcbBY[Zguwv�� ��� � &z�w�������;f,]��Lv0ZgY[u6��$�"����6��

�����:���������� B��������Dd E+dfJ��oM/L>J�� O5N�d�

��� �=���.>`�2�D>c�V� � ��� � & �^� ��� �^� �^� �A6�$�"����6�������:��������

PRu v �LY��"��Z��Ef(� �'�����\Y��)Z��<|[f vE] Lb0]=dgf v �LZcv � �=� � &z�w����� Y���vEb��Lf�&7i �4Z � ]`u��Ef 1%�LfjuA� fgk<Zg|��E]�v �Lf��zfjZ��gf�bY[uwd�ZcbBY�Zgu v � ��� � &A�^� "�@ �MY��(vEb ��fgk f�dgfju�Y � �`�'����� Y � u�]gvAZ��<|[f4vE] LbB]=dgfMYevzY[u�/"- C _�]���f�&!j uav ��f4]gv �Lf�b�LZguA�6k^v ��fFb0f�v ��bBuLf���� ]D�LuwvEf�bEW f0 �Zg_ <|ef ��Zgu*��f �A�0f��.vE] �������������� � � v ��fTY[uwd�Zcb9Y[Zgu v�k��Luwv0Y[|A� �'������Y��zZ��2|efvE]ILbB]=dgf Yev&

Page 24: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b�G^�AU �LvE]gbBY[Zg| Gcm

<�]/� �zf � ��f�� � v �Lf(� Zg| �Ef,Y[uwd�ZcbBY�Zgu v�� �=� � &z�^� ��� ���� �D>c�w��: � ���.:`�.6K� � 6 �=���A>g�2�D>c��� ����� � & �w� ��� ! � � 6 ���.8`�����2��:g� �>��D;L���� >�� 8�6�� :g�����w�A>`��6%8 ���� � 6 �:�;�; :D5"�=�D< 6���6������<�D:c����6��`�A6g����6�g�A>`��6 " � " !�� � ��g�A>`��6 " �7@ !�� � ��`�'�������

i ��� ]gb Lb0]��f�b0v } � ��� � &A�^� "=@ � k��`�'����� b0f�v ��b9uA�MZ.v[�;] �EvEf�� �Ef 1���fjuA� f � ��]/��Y[u.�\v �<Zcv�v ��f5Y[uA���A� v0Ye]`u� ZgY�|��&GU���f��LY�:�f�b0fjuA� f)Y�� v �LZcv�kwY[u v ��f � ]gbB_af�b ��Z��Ef �Ev0ZcvEf � }��5h�G��wY��7<8jTU�b0fjZ����<Z��<|efgk � �LY[|ef�Y[u5v ��fM|�ZcvEvEf�b��Z��EfTv ��f �Ev0ZcvEf � }��8(�����Zgu*�"f�b0fjZ����Lf�� & JFu.� ]gbBv �LuLZcvEfj|e}5fju�]D�.�D�Okwv ��f6/"- C WB�<Z��Ef�� Y[uwd�ZcbBY�Zgu v � ��f�� �gf�b�Y��u�]gvMZ��<|[f vE]I�LY��Ev0Y�u.�D�LY�� �.v ��f��Ef v[�;]I��Z��Ef��&

Page 25: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�bFl^�;S^}Vu v0Z� GVh

� ��� �������

�rf Lb0f��0fju vTu�]/� v ��f)� ]`_ <|ef�vEf �E}Vuwv0Z� ]�� v ��f Y[u.���v�|[Zgu.�D�LZ��gf ]�� � ������� &4P u v �Lf � ]`|[|e]*�MY[u.��k"Zgu>g�.:�� _aZj} ��f�Zguw} �Ef 1���fjuA� f ]������LZcbBZ�� vEf�b �2�Ev0Zcb0v0Y[uA� �MY[v � Z����<ZcbBZ�� vEf�b\Y[u v ��f �Ef�v gC ��� > �� � � ZguA�� ]`|�|e]/�;f��*�w}aZ)�]D� �0Y �2|e} fj_ <v }��0f 1%��fju�� f�]�� � �LZcbBZ�� vEf�b�� ��fj|e]`uA�`Y[u.�,vE] v ��f �Ef�v gC �� > �� & � � ���� � � �A&mi�w� ��A6 �.Y��MZgu } �Ef 1���fjuA� f,]�� �LY �`Y[v �&!i �LY��`Yev"��fj|e]`u.�D��vE]av ��f(�0f�v �& � � �A&

iF|[|����LZcbBZ�� vEf�b � ZguA�)��Z��Ef)Y[u ZTuLZg_af;Zcb0f �0Y �`u<YA=���Zguwv& � �LYevEf��$2Z�� f � �LZcbBZ�� vEf�b�� ZcbBf �$2Z�� f q ^ ������ ` b x9kv0Z�� q ^ a ��� b x�ZguA� u�f9�M|�Y[u�f.q ^ _ `�a b x &)iFuw}��EvEbBY[uA���Ev0Zcb0v0Y�u.� ��Yev � v\�z] �<Z�� ��f��5q � ��� � x�ZguA� fjuA�LY[u.� �MYev � Zu�f9�M|[Y�u�f Y��4Z2� ]`_a_afju v&�i�uw}�]gv ��f�bMvE]��gfjuA��b0f�� ]��`uLY ��f�� �^}.v ��f <Zcb��Ef�bMZcbBf,fjuA��|e]D�Ef�� Y[uS1���]gvEf��MY[u v ��f�E}Vu v0Z� af0 �Lb0f�� �BYe]`uA�0��fj|e]/� & �TbBZg_a_aZcb <b0]����A� v0Ye]`uA�GfjuA��|[]D�Ef��\Y[u �Z1%�LZcbBf��LbBZ����gf�v �Fq � � ��� x(Zcb0fM]�Lv0Y[]`uLZg| &1)� � > 4&q5�6� 121�70�F351

~7 �LbBf�� �0Ye]`uA�(ZcbBf � ]`uA�EvEb �A� vEf��2� b0]`_�dcZcbBY[Z��<|[f���k � ]`uA�Ev0Zguwv ��k�ZguA�aZ � ]`|[|ef�� v0Ye]`u\]��"]��f�bBZcvE]gb ��kwY[u���|��A�VWY[u.� ��]^]`|efjZgu � ]`uLu�f�� v0Yedgf��jk2Y[uwvEf�gf�b�ZcbBY[v �L_�f�v0Y��F]��f�bBZcvE]gb���k'��Z��Ef f0 �Lb0f�� �BYe]`uA�)ZguA� �Ef�vMf0 �LbBf�� �0Ye]`uA��&���������������! #"%$'&)(* ,+-$/.�.-�1032*.

SVY�_ <|ef,f0 �Lb0f����0Ye]`uA�FZcb0f5f0 �<b0f�� �0Ye]`u�� ���<Y[|ev4]`uL|[} � b0]`_ ���bBb0fju v �Ev0ZcvEf�dcZcbBY[Z��<|[f��& S�Y[_ <|ef f0 �LbBf�� W�0Ye]`uA� ��Zgu ��f2�A�Ef��rvE]�� "f���Y�� } �Ef�v �,]�� �Ev0ZcvEf���kpf�& �.&\v ��f.Y[uLYev0Y[Zg|3�Ef�v,]��"�Ev0ZcvEf���&.U���f2�0}^uwv0Z� ]��"�0Y�_ <|eff0 �<b0f�� �0Ye]`u��)Y��4Z���� ]`|[|e]*� ���

� �j�.��;%6�6������ !�!

>`�.:�� ��� > �$�g� �:�;V�^�K�D:g�����.>c����\�^� � �6`� ��� >K�w� �'6 �2�w� ��:g�6���A>����� +0GIHgY R + ����G � 6 A:�:�;%6�>����D:c�6���A>c�V� "� +0SJCgZA�VR + ����G � 6 A:�:�;%6�>����D:c�6���A>c�V�!&���A>`�

���8 ��� >&�.>`�<� > �;%6���8�6c���<� <��6 �

� + ��+ � �j���';%6�6��D��� + �A+

� + ��+ � �j���';%6�6��D��� ��� ;%:=<L�^�D>�; �A: �

� �w�j���'; 6�6��D�V� + + �w���.��;%6

�6������ ��� ;%:=<L�^�D>�; >��A8

� �w�j���'; 6�6��D�V� + �+ �w���.��;%6

�6������ ��� ;%:=<L�^�D>�; :`�

� �w�j���'; 6�6��D�V� + ��: � + �w���.�'; 6

�6��D�V� ��� ;%:=<L�^�D>�; 6��<� ;��6� �c�.6 : �

� �w�j���'; 6�6��D�V� + � � + � �j���';%6

�6��D��� ��� ;%:=<L�^�D>�; ���.�';V�^�D>`�2��:g�

� �w�j���'; 6�6��D�V� + � �?+ �w���.�'; 6

�6��D�V� ��� ;%:=<L�^�D>�; 6��`�����A>%;%6g�"�D6

� �w�j���'; 6�6��D�V� + � + �w���.��;%6

�6������ ���46��`��>�;V�c� �

� �w�j���'; 6�6��D�V� + ��� + � �j���';%6

�6��D��� ���r����6��`��>�;���� �

� �w�j���'; 6�6��D�V� + + �w���.��;%6

�6������ ��� ;%6<�w� � � >c�

� �w�j���'; 6�6��D�V� + � + �w���.��;%6

�6������ ����<w�.6�>`��6 �&� � >c�

� �w�j���'; 6�6��D�V� + �� + � �j���';%6

�6��D��� ��� ;%6<�w� � � >c� :`� 6��`��>�;

� �w�j���'; 6�6��D�V� + ��� + � �j���';%6

�6��D��� ����<w�.6�>`��6 �&� � >c� :`� 6��g�'>�;

� �w�j���'; 6�6��D�V� +H, + �w���.��;%6

�6������ ���r������6=<�6 � >D8�8<���2��:g�

� �w�j���'; 6�6��D�V� + � + �w���.��;%6

�6������ ���r������6=<�6 � �j� ��w�A>V�c�2��:g�

� �w�j���'; 6�6��D�V� + � + �w���.��;%6

�6������ ���r������6=<�6 � �V�';`�<� ��;��^�D>`�<�D:g�

� �w�j���'; 6�6��D�V� +�# + �w���.��;%6

�6������ ���r������6=<�6 � 8L�c�2�^�w��:g�

� �w�j���'; 6�6��D�V� +E� :%8 + �w���.�'; 6

�6��D�V� ���r������6=<�6 �&��6��?>V���.8�6 �

� ��6 ��� �j�.��;%6

�6������ ��� > ��6 ��� �j�.��;%6

�6�������6<�^� �D:c�

� � >L��6��w�j���'; 6

�6��D�V� ��� >D�D>L��6 6������.6L�^� �D:g�

i54���� �762k(q �0f�f�S^f�� v0Ye]`u l�& G�&[h�m l P ��fjuwv0YA=Lf�b � m k <Z��gf�GNOgxF]gb,Y ��fju v0Y[=Lf�bjk6Y�� Z �E}V_ ��]`|G]gb f0 �Lb0f�� �BYe]`u� �LY�� � Y��Lfju v0YA=<f�� Zgu ]�� �Ef�� v�k � �A��� Z�� Z d�Zcb9Y[Z��<|ef�]gb Z���f>=<uLf�� �E}V_ ��]`| & SVY[uA� faZ �.>`�

���84��Zgu �"f.Zgu

>g�.:��Ok;v ��f�b0f Y �aZ �]D� �0Y��<|ef Zg_ �<Y��D�LYev } Y �TZrdcZcbBY[Z��<|[f ]gb���f>=<uLf�� �E}^_ ��]`|��LZ��\v ��f��0Zg_�f uLZg_�f Z���Z�E}V_ ��]`|[Y�� � ]`uA�0v0Zgu v&)S��A��� Zgu Zg_ �2Y �D�LYev{}�Y���2Z����gf�� �^}�v �Lf,Y[u vEf�b�Lb0f�vEf�bMZ���Zgu f�b0b0]gb�&U���f ]gb��Lf�b4]��0<Zcb��0Y[uA�)<b0f�� f���fjuA� f(� ]gb4]��f�bBZcvE]gb���� b0]`_ �LY �D� vE]\|e]*� Y����

Page 26: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�bFl^�;S^}Vu v0Z� G�G

� ��#, � ��':%8� ����� �J �J���� �� �J���� � � ��:`� � �� �

j��f�bBZcvE]gb�� ]�� f 1��LZg| Lb0f�� f���fju�� f Z�� �E]���Y[ZcvEf vE] v ��f |ef� v�kTf0 �� f<v � � v �LZcv Z�� �E]���Y[ZcvEf�� vE] v ��frbBY �D�wv&oGZcb0fju v �Lf��Ef���_\Zj} ��f(�A�Ef�� vE]2�gb0]D�A f0 �<b0f�� �0Ye]`u��&����������������� .$ &)(* ,+-$/.�.-�1032*.

i ��Z��Ef,f0 �Lb0f����0Ye]`u �LZ��)v �Lf(� ]`|�|e]/�MY�u.� �E}^uwv0Z� ���D>L��6

�� �j�.��;%6

�6������ !�!

+�� >���6 +�w���.��;%6�6������ +?! + � �j�.��;%6

�6������ + � +�w���.��;%6

�6������ +?! + � �j�.��;%6

�6������ + � +�^�w��w���.��;%6

�6������ +?! + � �j�.��;%6

�6������ + � +

+�6<��>��'+i �D>L��6

�� �j���';%6

�6��D��� b0f�v ��b9uA�;v ��fTd�Zg|��Lf�]�� v ��fc=<b��Ev;f0 �LbBf�� �0Ye]`u�]`u�v ��fTbBY �D�wv"�LZguA�*�0Y���fF]�� � ! �ek

� �A� �5v �LZcvGv ��f"� ]gb0b0f��$�]`uA�LY�u.� � ]`uA�<Yev0Ye]`u ]`u5v ��f)|ef� v0�LZguA� �0Y ��fAf�dcZg|��LZcvEf��(vE]*" &pU �%�A�jkcY��O� �j�.��;%6�6������]`u v ��f�|ef� v��0Y ��f Y��FvEb��Lfgk"v �Lfju v ��f bBf�� �L|evTY���v ��f � ]gb0b0f��$�]`uA�LY�u.� �w���.�'; 6

�6��D�V��]`u v ��f5bBY �D�wv��0Y ��f�&TPH�u�]`u�f ]�� v ��f f0 �<b0f�� �0Ye]`u��z]`u v �Lf,|ef� v"�LZgu��*�BY���fFf�d�Zg|��<ZcvEf��)vE] " k^v �Lf b0f�� �L|ev;]��pv ��f �D>L��6

�6��D�V�.6<�w�w��:g�Y��4v �Lf u��L_�f�bBY��TdcZg|���f "D&�PRvMY���Zgu f�b0bB]gb � ]gb�Zguw} f0 �LbBf�� �0Ye]`u ]`u v ��f |ef� v �LZguA���BY���f,vE].b0f�v ��bBu Z\d�Zg| ��f]gv ��f�bMv �<Zgu v ��f,vEb��Lv � d�Zg|��Lf�� &a]gb "D&

������������� �3$�� & (* #+-$/.�.��%0 2,.i �Ef�v4f0 �Lb0f����0Ye]`u �LZ��)v �Lf(� ]`|�|e]/�MY�u.�)�0}^uwv0Z� "���6 �

�6������ !%!

+ + ��6 ��6�; 6�� +��=+�w�^� +��=+ ��6`�

�6�;%6�� + �?+ � � ��6 � 8�6 <�=���c�<�D:c�

� �w�j���'; 6�6��D�V� +��=�0+ � �j�.��;%6

�6������ � � ��6 � ���"� ;��6�w��:g�&�.6<���

� �w�j���'; 6�6��D�V� +9�w����:g�0+��w�j���'; 6

�6��D�V� � � ��6 � �^�"�D:c���6 �

�6�; 6�� !%! �w�j���'; 6

�6��D�V�

i �Ef�v ��Zgu ��f ��f>=<u�f�� �w} fju%�<_�f�bBZcv0Y[u.� Yev � fj|efj_�fjuwv ��Y[uA�BY���fI���b9|e} �LbBZ�� f�� � A�w�^� � � &rU���f Y[uA��| �A�0Ye]`u]��f�bBZcvE]gb � �=� �^vEf��Ev �)Z d�Zg|��Lf � ]gb�_afj_ ��f�b�� �<Y .Y[u�Z)�Ef�v&AU���f �LuLY[]`ua]��f�bBZcvE]gb � �w���D:c� �wv0Z��gf���v �Lf �<uLYe]`u]�� v\�z]*�Ef�v �& P �tfjY[v ��f�b4Zcb �D�L_�fjuwv4Y��)Zau��L_ ��f�b;]gb�Z �E}^_ ��]`|[Y���d�Zg| ��f,Y[uA�EvEfjZ�� ]��GZ �Ef�v�k<Y[v�Y �"� ]wf�b�� f�� vE]Z2�0Y[uA�`|ef�vE]`u �Ef�v&���������� $ (� & (* ,+-$ .�.-�%0 2*.

� �LY[|ef �0Y�_ <|ef f0 �<b0f�� �0Ye]`u�� ��Zgurb0fLb0f��0fju v(�Ef�v � ]�� �0v0ZcvEf���k u�f0 Vv,f0 �Lb0f�� �BYe]`uA�Fb0fj|[ZcvEfI��Lb0b0fjuwv,ZguA�u�f0 Vv*�Ev0ZcvEf dcZcbBY[Z��<|ef��\vE] f0 �Lb0f����\vEbBZgu��0Yev0Ye]`uA�\Y[u v ��f�? S.- &zU���f �EvEb��A� v �Lb0f ]�� u�f0 Vv\f0 �Lb0f����0Ye]`uA�.Y���0Y[_aY�|[Zcb�vE]av ��f(�EvEb���� v ��b0f ]��0�0Y[_ <|[f�f0 �Lb0f�� �BYe]`uA�,q S^f�f SVf�� v0Ye]`u l�&[h�&[h l S�Y[_ <|efT~! �Lb0f����0Ye]`uA� m k�<Z��gf GVh=x &U���f*�LY�:�f�b0fjuA� f\Y�� v �LZcv5u�f0 ^v f0 �<b0f�� �0Ye]`u Zg|[|e]/��vE] bBf� f�b vE] u�f0 Vv �Ev0ZcvEf.dcZcbBY[Z��2|ef��& U���f2�gb9Zg_a_aZcb5Y����f<Y�� vEf�� �"fj|[]/�(&

�A6��w��6��D��� !�!

>`�.:�� ��� >D���g� �:�;��^�K�D:c�6���.>c�V��\�^� � �6`� ��� > �^� �'6 �<�^�&��:g�6���A>����� +0GIHgY R + ����G � 6 �:�:�;%6�>c����:g�6���A>����#"

Page 27: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�bFl^�;S^}Vu v0Z� Ggl

� +0SJCgZA�VR + ����G � 6 �:�:�;%6�>c����:g�6���A>���� &���A>`�

���8 ��� > �A>`�<� >�';%6���8�6g���<� L�D6 �

� + ��+ �A6�� ��6��D�V� + �A+

� +9��6��w� + + ��+ �w�j���'; 6�6��D�V� + ��+ ��� ��6��w���A>%;c�A6 :� >�� +6������.6L�^� �D:g�3+

� + ��+ �A6�� ��6��D�V� ��� ;%: <<�^�D>�; �A: �

�\��6�� ��6��D�V� + + ��6��w�

�6������ ��� ;%: <<�^�D>�; >��A8

�\��6�� ��6��D�V� + �+ ��6��w�

�6������ ��� ;%: <<�^�D>�; :`�

�\��6�� ��6��D�V� + ��: � + ��6��w�

�6������ ��� ;%: <<�^�D>�; 6��<�D;c�6� �c��6 : �

�\��6�� ��6��D�V� + � � + �A6�� � � 6��D�V� ��� ;%: <<�^�D>�; ���.��;��^�D>`�<�D:g�

�\��6�� ��6��D�V� + � �?+ ��6��w� � 6������ ��� ;%: <<�^�D>�; 6��`�"�c�A>%;%6c���D6

�\��6�� ��6��D�V� + � + ��6��w�

�6������ ���46��g�'>�;V�c���

�\��6�� ��6��D�V� + ��� + �A6�� �

�6��D�V� ���r���A6��`��>�;V�c� �

�\��6�� ��6��D�V� + + ��6��w�

�6������ ��� ;%6L�^� � � >c�

�\��6�� ��6��D�V� + � + ��6��w�

�6������ ����<w��6�>`��6 �&� � >��

�\��6�� ��6��D�V� + �� + �A6�� �

�6��D�V� ��� ;%6L�^� � � >c� :`� 6��`��>�;

�\��6�� ��6��D�V� + ��� + �A6�� �

�6��D�V� ����<w��6�>`��6 �&� � >�� : � 6��g�'>%;

�\��6�� ��6��D�V� +H, + ��6��w�

�6������ ���r���V�.6=<�6 � >D8�8L�c�2��:g�

�\��6�� ��6��D�V� + � + ��6��w� � 6������ ���r���V�.6=<�6 � �j� V�^�A>V�c�<�D:g�

�\��6�� ��6��D�V� + � + ��6��w�

�6������ ���r���V�.6=<�6 � �V�';g�2� ��;��w� >`�<�D:c�

�\��6�� ��6��D�V� +�# + ��6��w�

�6������ ���r���V�.6=<�6 � 8L�c�<�V�w��:g�

�\��6�� ��6��D�V� +E� :%8 + ��6��w�

�6������ ���r���V�.6=<�6 �&��6�� >����.8�6`�

� ��6 ���A6��w�

�6��D��� ��� >D��6 � �A6�� �

�6��D�V�.6<�w�w��:g�

� � >L��6���6�� �

�6��D�V� ��� > � >L��6 6�������6<�^� �D:c�

��6 ����6��w�

�6������TZguA�a� >L��6

���6�� �

�6��D�V�TZcb0f;v ��f �BZg_�f)Z��z��6 �

�� �j�.��;%6

�6������ q �Ef�fMS^f�� v0Y[]`u5l�&[h�&[h�& G l S^f�v~! �Lb0f�� �BYe]`uA� m k�<Z��gf(G�G`xzZguA� �D>L��6

�� �j���';%6

�6��D����q �Ef�f S^f�� v0Ye]`u l�&[h�&[h�&[hfl C Z��Ef ~! �Lb0f�� �0Y[]`uA� m k�<Z��gf(G�G`xb0f��$�f�� v0Yedgfj|e}gk �MY[v �.v �LfFbBf<|[Z�� fj_�fjuwv�]���+c� �j���';%6 +��MYev � +9�A6�� � +�&GU ��f�]`u<|e}\Z��A�LY[v0Ye]`uLZg|A<b0]����A� v0Ye]`u�Y��

+B��6�� � +I+ ��+5�w���.��;%6�6�������+ �A+ck � �LY�� � Zg|�|e]/� �FvE]��$� �LY�� v�� Zg|[| v ��f5d�Zcb9Y[Z��<|ef��TY[u � �j�.��;%6

�6������ vE] v ��f

����� � �Ev0ZcvEf�&AU ��f���6��w� ]��f�bBZcvE]gb �LY��0vEbBY ����vEf��G]`u.f�dgf�b0}�]��f�bBZcvE]gb�&7?L]gb;Y[u��Ev0ZguA� fgk v �Lf � ]gbB_ �<|[ZF��6��w��� � C �� � � ���.Y �FZ�� ��]gb0v �LZgu��4� ]gb,v ��f � ]gbB_)�L|[Z � �A6�� � � C�� a��6��w��� � ��� �G��6��w������� & P{v,Y�� Zgu f�b0b0]gb,Y �;Y[uv ��f � � ]��f,]��pv ��fT��6�� �.]�"f�b9ZcvE]gb4]����Lb��MZgu�]gv �Lf�b��A6��w�\]��f�bBZcvE]gb�&1)� � � ���\3�7 !�7B��3 ��� ! l5� 2 H

�����3����� � � ��$�� � + � �� "1$ .i �Ev0ZcvEf ]��pv �Lf _�]���fj|OY��4Zgu Z�� �0Y �`u<_�fju v)]��GdcZg|���f��MvE]\Z2�Ef�v�]��0�0v0ZcvEf dcZcbBY[Z��<|ef���&AU���f��Ef dcZcbBY[Z��2|ef��qsZguA� Zg| �E]aY[uA�Ev0Zgu�� f��)]��p_a]��A�<|ef��9xzZcb0f ��f���|�Zcb0f�� �^}.v ��f u�]gv0Zcv0Ye]`u6��.>`�

�8�6�� ;�>g�A>g�2�D:c� !%!�+ �UCgH3+

>`��:�� +?! +r��� ��6 +��=+>`��:�� +?! +r��� ��6 +��=+�^�w�

U���fFv }��fFZ�� �0]���Y[ZcvEf�� ��Yev �\Z dcZcbBY[Z��<|ef���f���|[ZcbBZcv0Y[]`u���Zgu*��f�fjY[v ��f�b;Z)��]^]`|efjZgu6kwZ � ��Zg|�Zcbjk^Z �A�0f�b ��f>=2u�f��_�]��A�L|efgkV]gb�Zgu Zcb0bBZj} ]��GZgu } ]��Gv ��f��Ef�qsY[uA��|��A�<Y[u.� ZcbBbBZj}��4]��GZcb0bBZ=}��9x &�����3�����������* $ � $�� ���#$/+ .

iDv }��f(�$�f���YA=Lf�b��LZ��4v ��f �E}Vu v0Z� ����� ��6 !%!�:%:�;%6�>c�

� + ?+ �A>�; +��=+ �.>�; + � +�^�w� �A>�; + � +� �^�`���6`� +6�w� + �w� ��A6 �� + >g�^�A> � + �w� � �6 � +6�^��+ �^�`���6`� +�: + ��� ��6� >`��:�� � + ��+ �w���.�'; 6

�6��D�V� +��=+ �w���.��;%6

�6������ +��=+�w�^� + ��+ �

Page 28: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�bFl^�;S^}Vu v0Z� G�,

� + �V�.:L��6<�w�'+ >g�.:�� � + ��+ � �j�.��;%6�6������ + � +�^�^��+��=+ � �j�.��;%6

�6������ + ��+ �

�.>�; !%!�>`��:��� �^�`���6`�

i dcZcbBY[Z��<|[fa]���v }�"f*A:�:�; 6�>�� ��Zgu v0Z��gf.]`u v ��f.u��L_�f�b9Y���Zg|(dcZg|���f�� & ZguA��" q b0fLb0f��0fju v0Y[uA� � Zg| �EfZguA��vEb���fgkVb0f��$�f�� v0Yedgfj|[}�x &GP u.v �Lf���Z��EfT]��pZ |[Y �EvA]��OdcZg|���f��;fjuA��|[]D�Ef�� Y[u 1���]gvEf�� q � ��f�bBfFZcvE]`_2�)ZcbBfFv0Z��gfjuvE] ��f��E}V_ �"]`|�Y�� � ]`u��Ev0Zgu v � x9kLv ��fTd�Zcb9Y[Z��<|efFY���Z � ��Zg|[Zcb� �LY�� ��v0Z��gf,Zgu }�]��tv ��f��0fFdcZg|���f���&(PRu�v ��f ��Z��Ef ]��Zgu >g�^�.> � ��f���|[ZcbBZcv0Y[]`u6k v ��f�=Lb��0v4� �j�.��;%6�6������ Y��zv ��fF|e]/�;f�b �"]D�<uA��]`u.v ��f����.��� � bBY�Lv ZguA�av �Lf��Ef�� ]`u��� �j�.��;%6

�6�������Y��Av �Lf��.�"f�b ��]D�LuA� &#/;]gv � ]��tv ��f��EfFf0 �Lb0f�� �0Y[]`uA�z_)�A�Ev;f�dcZg|��LZcvEfTvE]�Y[u vEf�gf�b�� ]`u��Ev0Zgu v ��&

?GY[uLZg|[|e}gk^Zgu ZcvE]`_�]�<v0Ye]`uLZg|[|e} � ]`|[|e]*�zf����w}.Z |[Y��0vA]��6f0 �Lb0f�� �0Y[]`uA�AY[u�<Zcb0fjuwv ��f��Ef��;Y[uA�<Y���ZcvEf��zZgu�Y[uA�0v0ZguA� f]�� _�]��A�L|ef,ZcvE]`_ q S^f�f5SVf�� v0Ye]`u l�& G�& F l - j /�J�*t~ ��f���|�ZcbBZcv0Ye]`uA� m k�<Z��gf)GV(`x &4U��Lf �gf�}=�;]gb�� ��Z��A�Ef���v ��f_�]��A�L|efFvE] ��fFY[u��Ev0Zgu v0Y�ZcvEf�� Z��)Zgu Z��E}^u�����b0]`uL]D�A� Lb0]�� f�� �,q S^f�f S^f�� v0Ye]`u l�& G�&[h�G l o b0]�� f�� �Ef�� m k.2Z��gf Ggi`x &�����3������2* �� � � � + � �� #"%$/.

i �Ev0ZcvEf ]��pv �Lf _�]���fj|OY��4Zgu Z�� �0Y �`u<_�fju v)]��GdcZg|���f��MvE]\Z2�Ef�v�]��0�0v0ZcvEf dcZcbBY[Z��<|ef���&AU���f��Ef dcZcbBY[Z��2|ef��qsZguA� Zg| �E]aY[uA�Ev0Zgu�� f��)]��p_a]��A�<|ef��9xzZcb0f ��f���|�Zcb0f�� �^}.v ��f u�]gv0Zcv0Ye]`u6����A>`�

�8�6L� ;%>`�.>`�2��:g� !�!�+�D=�JCNH3+

>`��:�� +?! +r��� ��6 +��=+>`��:�� +?! +r��� ��6 +��=+�^�w�

U���f�v }��f�Z�� �0]���Y[ZcvEf�� �MY[v � Z d�Zcb9Y[Z��<|ef*��f���|[ZcbBZcv0Ye]`u ��Zgu���f\fjYev �Lf�b Z ��]w]`|[fjZgu6k(Z4� ��Zg|�Zcbjk Z��A�Ef�b ��f W=<u�f�� _�]��A�L|efgk"]gb Zgu ZcbBbBZj} ]��;Zgu } ]�� v ��f��Ef qsY[uA��| �A�LY[u.�aZcbBbBZj}��F]��AZcb0bBZ=}��9x q S^f�f\S^f�� v0Y[]`u l�& G�&[hTl SVv0ZcvEfX ZcbBY[Z��<|[f�� m kA<Z��gf Ggl`x &�����3� ���������� ��,$�� " � + � � �%0 2,.

iFu Z�� �0Y��`uL_�fjuwv��LZ��4v ��f � ]gbB_ �>��^�w��<`�

�8�6�� ;%>`�A>g�2��:g� !�!�+0C.��� D%E � +

>��^�w��<`���: 8�� + �=+

>��^�w��<`���: 8�� + �=+�w�^�

>��^�w��<`���: 8�� !�!

>g�.:�� +?! � + � �j���';%6�6��D��� � � �A: �g� >�; >��^�w��<`�`� 6g�V�

� +�������� + + ��+ >g�.:�� + ��+ +?! � + � �j���';%6�6��D��� � �r�=���c� >��^� �(<`�`� 6c���

� +B��6�� � + + ��+ >g�.:�� + ��+ +?! � + �A6�� ��6��D�V� � � �A6��w� >��^� �(<`�`� 6c���

jTu v ��f�|ef� v �LZguA� �0Y��LfK]�� v ��f Z�� �0Y �`u<_�fju v�k ZcvE]`_ ��fju�]gvEf���v ��f ��Lb0b0fjuwv dcZg|���f&]�� Z d�ZcbBY�Z��<|efgk� �=���c��� >g�.:�� � � ��fju�]gvEf��aYev �\Y[uLYev0Y[Zg|;dcZg|���fgk�ZguA� � ��6��w��� >`��:�� � � ��fju�]gvEf��aY[v ��d�Zg| ��f Y[u�v ��f uLf0 ^v2�Ev0ZcvEf�&PH�)v �Lf\f0 �Lb0f�� �0Y[]`ur]`u v �Lf\bBY �D�wv �LZgu�� �0Y��Lf�f�d�Zg|��<ZcvEf�� vE] Zgu Y�u vEf�gf�b ]gb �E}V_ �"]`|�Y��2� ]`uA�Ev0Zguwv�kGv ��f.Z��EW�0Y �`uL_afju v)�0Y[_ <|[} _�fjZguA� v �LZcv v ��f.|ef� v �<ZguA� �0Y��Lf\Y��,f 1��LZg|AvE] v ��f.bBY �D�wv �LZguA� �0Y���f�&�jTu v ��f\]gv �Lf�b�LZguA�6k2Y � v �Lf,f0 �<b0f�� �0Ye]`u f�dcZg|��LZcvEf���vE]\Z��Ef�v�k<v ��fju v ��f Z�� �0Y��`uL_�fjuwvM_�fjZguA�Mv �LZcv4v ��f |ef� v��<ZguA� �0Y��Lf,Y��� ]`u v0ZgY�u�f�� Y[u v �LZcv �Ef�v&)PRv�Y���Zgu f�b0bB]gb�Y �Gv ��f d�Zg|��Lf,]��(v ��f f0 �Lb0f����0Ye]`u Y �Mu�]gv�� ]`u v0ZgY[uLf�� Y[u v ��f b9Zgu.�gf]��Gv ��f,dcZcbBY[Z��<|efT]`u v �Lf |ef� v��LZguA� �0Y��Lf�&

P u\]gb ��f�b � ]gb�Z)Lb0]��gbBZg_�vE] �"fFY[_ <|[fj_�fju v0Z��2|efgk v ��f�bBfF_)�A�Ev �"f �E]`_�fF]gb���f�b�Y[u � �LY�� �av ��fTZ�� �0Y��`uVW_�fjuwv �"��Zgu���f�f0 ^f����vEf�� ���A����v �LZcv�u�] d�ZcbBY�Z��<|ef�Y �zZ�� �BY �`u�f���Z�� vEf�b4Yev �zdcZg|���fTY��AbBf� f�b0fju�� f�� & U��LY��zY��;u�]gvv ��f ��Z��Ef�Y �Gv ��f�b0f5Y���Z*��Yeb���<|[Zcb ��f�fjuA�LfjuA� } Zg_�]`u.��v ��f Z����0Y �`uL_�fjuwv �FY[u Zguw} �`Yedgfju Lb0]�� f�� �& PMfju�� fgk� �A� � Z2� ]`u��LYev0Ye]`u Y��4Zgu f�bBb0]gb�&�P{vFY��4Zg|��0].Zgu f�bBb0]gb � ]gb�Z\d�ZcbBY�Z��<|ef vE]*�"f,Z����0Y �`u�f�� _�]gb0f v �<Zgu ]`uA� f ZcvZgu } �`Yedgfju v0Y[_�f�& - ]gb0f(LbBf���Y��Efj|e}gkLYev4Y �)Zgu f�b0b0]gbMY��{�h�& v ��f u�f0 Vv4]gb ��Lb0b0fjuwv)d�Zg|��Lf ]��GZ5dcZcbBY[Z��2|ef Y��4Z�� �0Y��`u�f�� _�]gb0f,v �<Zgu ]`uA� f Y[u Z2�`Yedgfju Lb0]�� f�� ��k<]gbG�& v ��f Y[u<Yev0Y[Zg|"d�Zg| ��f ]��pZad�ZcbBY�Z��<|ef Y��)Z�� �0Y��`u�f�� _�]gb0f v �LZgu ]`uA� f Y�u v ��f Lb0]��gbBZg_ kL]gbl�& v ��f ���bBb0fju v)dcZg|���f,Zgu�� v ��f,Y[uLY[v0Y[Zg|"d�Zg|��Lf ]��pZ�dcZcbBY[Z��2|ef Zcb0f(��]gv � Z�� �0Y��`u�f�� Y[u v ��f(<b0]��gbBZg_ k�]gb,.& v ��f ���bBb0fju v)dcZg|���f,Zgu�� v ��f,u�f0 Vv4dcZg|���f ]��GZ�d�Zcb9Y[Z��<|ef Zcb0f(��]gv � Z����0Y �`u�f�� Y[u v �Lf(Lb0]��gbBZg_ &

Page 29: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�bFl^�;S^}Vu v0Z� Ggn

�����3������� �� �� �,$�� " � + � � �%0 2,.U��Lf vEbBZguA�BYev0Ye]`u bBfj|[Zcv0Ye]`u % ]��Av ��f _a]���fj| Y��FZ��Ef�vF]�� ���b0bBfju v �Ev0ZcvEf���u�f0 Vv �Ev0ZcvEf <ZgYeb��& � ��f�v �Lf�b]gbMu�]gv4Z �`Yedgfju <ZgYeb)Y��)Y[u�v �LY��"�0f�v4Y��"��f�vEf�bB_aY�u�f��*�w} Z ��]w]`|efjZgu�dcZg|���f�� f0 �Lb0f�� �BYe]`u��;kLY[uwvEb0]����A� f��*�w}v ��f � GIHJC%�A� ���gf�}g�z]gb�� &zU���f(�0}^uwv0Z� �]��(Z�GIH C �A� ��f���|�ZcbBZcv0Ye]`u Y��j��w�A>c���

�8�6L�D;�>g�A>`�<�D:c� !%!�+0GIHJC%�.� +r�w�A>c���

�6��D�V� �+ �=+��

�w�A>c����6��D�V� !�!.��6��w�

�6������

PRvMY��4Zgu f�b0b0]gb�� ]gbMv �Lf,f0 �<b0f�� �0Ye]`u vE]a}^Y[fj|�� Zgu } dcZg|���f ]gv �Lf�bMv �LZgu &a]gb "D&zPH�pv ��f�b0f Y �4_�]gb0f,v �<Zgu]`u�f)GIHJC%�A� ��f���|[Zcb9Zcv0Ye]`u6k�v ��f,vEb9ZguA�0Yev0Ye]`u bBfj|[Zcv0Ye]`u Y��)v �Lf(� ]`u��$�<uA� v0Ye]`u ]��GZg|[|6]��KGgH C%�.�2��f���|[ZcbBZcv0Ye]`u��&�����3�� � �*$ � " � + � � �%0 2,.

U��Lf��Ef�v(]��"Y�uLYev0Y[Zg|��Ev0ZcvEf��A]��2v ��f4_a]���fj|�Y � ��f�vEf�bB_aY[uLf�� �^}5Z �"]^]`|efjZgu5f0 �Lb0f�� �BYe]`u �LuA��f�bGv ��f � D �TD$G���gf�}=�;]gb�� &;U���f(�E}Vuwv0Z� �]��(Z D=�LD�G��Lf���|[ZcbBZcv0Ye]`u Y ���

�=���c��8�6L� ;%>`�.>`�2��:g� !�!�+�D=�TD$G +��=�����

�6��D�V� ��+��=+��

�=���c��6��D��� !�! �w���.��;%6

�6������

PRv)Y���Zgu.f�bBb0]gb"� ]gb�v ��fTf0 �Lb0f�� �BYe]`u\vE]2� ]`uwv0ZgY[u v ��f���6��w� � �T]��f�bBZcvE]gbjkV]gb)vE]5}VYefj|���Zgu }�d�Zg| ��f�]gv �Lf�bv �LZgu &\]gb " &;P �Gv ��f�b0f Y��4_�]gb0f v �LZgu ]`uLf D=�LD�G ��f���|[ZcbBZcv0Ye]`uOkLv ��f Y�uLYev0Y[Zg| �Ef�vFY��4v �Lf � ]`u�� �LuA� v0Ye]`u ]�� Zg|[|]��Gv ��f D=�LD�G���f���|�ZcbBZcv0Ye]`uA�&�����3��� � ��� �,$�� " � + � � �%0 2,.

U��Lf �Ef�v ]��5Y[u dcZcbBY[Zguwv �Ev0ZcvEf�� qsY & f�& v ��f ZguLZg|[]��g]D�A� ]���u�]gbB_aZg| Z����0Y �`uL_�fjuwv ��k Z�� ��f���� bBY ��f��&Y[uS^f�� v0Ye]`u l�& G�& l l i SLS^P �6< ��f���|[Zcb9Zcv0Ye]`uA� m k%<Z��gf�G�,wx ��ZguI��f��$�f���YA=Lf��I�A�0Y[u.�,Z(�"]^]`|efjZgu�f0 �Lb0f����0Ye]`u2�Lu���f�bv ��f � D=�%�JCgH����gf�}g�z]gb�� &zU���f(�0}^uwv0Z� �]��(Z D=���UCgH*��f���|�ZcbBZcv0Ye]`u Y��j��=���A>g�

�8�6L�D;�>g�A>`�<�D:c� !�!�+�D=�%�JCgH +����V�A>g�

�6��D�V� ��+��=+��

�=���A>g��6��D�V� !�!r� �j�.��;%6

�6������

PRv)Y���Zgu.f�bBb0]gb"� ]gb�v ��fTf0 �Lb0f�� �BYe]`u\vE]2� ]`uwv0ZgY[u v ��f���6��w� � �T]��f�bBZcvE]gbjkV]gb)vE]5}VYefj|���Zgu }�d�Zg| ��f�]gv �Lf�bv �LZgu�&a]gb "D& P �tv �Lf�b0f Y��)_�]gb0f v �LZgu ]`uLf�D ���UCgH���f���|�ZcbBZcv0Ye]`u6kVv ��f,Y[uwdcZcbBY[Zguwv �0f�v4Y��;v ��f(� ]`u�� �LuA� v0Ye]`u ]��Zg|[|6]��pv ��f D=�%�JCgH*��f���|[Zcb9Zcv0Ye]`uA�&�����3��������� ����,$�� " � + � � �%0 2,.

P u ]gb ��f�bTvE]�_aZ��gf ��f���� bBY Lv0Ye]`u��M_�]gb0f � ]`uA��Y��0fgk�Z*�E}V_ ��]`|3��Zgu �"f Z�� �E]���Y[ZcvEf��c�MYev � Z�� ]`_\_�]`uL|e}f0 �<b0f�� �0Ye]`u & U���f(�E}Vu v0Z� � ]gb4v �LY�� �VY[uA� ]��0��f���|[Zcb9Zcv0Ye]`u Y����8�6�<�=��6

�8�6�� ;%>`�A>g�2��:g� !�!�+ QJRUSLD=�IR +

>g�.:�� +?! � + �w���.�'; 6�6��D�V� +��=+

>g�.:�� +?! � + �w���.�'; 6�6��D�V� +��=+�w�^�

>g�.:�� +?! � + �w���.�'; 6�6��D�V� +��=+

� ��fju�f�dgf�b4Zgu Y���fjuwv0YA=Lf�bzb0f� f�b0bBY[u.� vE]5v ��f��0}^_ ��]`|<]`u�v ��fT|ef� v �LZgu����0Y ��fM]��Ov �Lf � ! ���VY[u�Z QURUSLD=�UR]����Lb��4Y[u Zgu f0 �LbBf�� �0Ye]`u6k�Yev4Y ��b0f<|[Z�� f�� �^}�v ��f f0 �<b0f�� �0Ye]`u ]`u v ��f,bBY �D�wv��LZguA� �BY���f�&(U���f f0 �Lb0f�� �BYe]`u]`u v ��f,b9Y �D� v"�LZgu�� �0Y���f Y��)Zg|>��Zj}��4f�dcZg|��LZcvEf�� Y[u Yev �"� ]`uwvEf0 ^v�k ��]/�;f�dgf�b5q �0f�f S^f�� v0Ye]`u l�& G�& F�l - j / J�*t~��f���|[ZcbBZcv0Y[]`uA� m k3<Z��gf*GV( � ]gb Zgu f0 �<|[ZguLZcv0Ye]`u ]�� � ]`uwvEf0 Vv �9x &�?�]gb���Zcb�� b0f� f�bBfjuA� f�� vE]4��f>=<u�f�� �0}^_ ��]`|��Zcb0f Zg|[|[]/�;f��6kA����v"��Yeb ��L|[Zcb���f>=<u<Yev0Ye]`uA��Zcb0f uL]gv4Zg|[|e]/�;f��6k<Zgu�� b0f�� �L|[v�Y�u Zgu f�b0b0]gb�&

PRv4Y��4u�]gv"�]D� �BY �<|ef�vE]\Z�� �0Y �`u d�Zg|��Lf���vE]I��f>=<u�f�� �0}^_ ��]`|���u�]`uVW ��f�vEf�bB_\Y[uLY��Ev0Y ��Zg|[|e}�&#i�u�]gv �Lf�b �LY�:�f�bEWfjuA� f ��f�v\�zf�fju ��f>=<u�f��(�0}^_ ��]`|��6ZguA� dcZcbBY[Z��<|[f��6Y��6v �LZcv � �LY[|efGdcZcbBY[Z��<|ef��tZcb0f �Ev0Zcv0Y���Zg|�|e}�v{}%�f��6k=��f>=<uLY[v0Ye]`uA�Zcb0f u�]gv&

Page 30: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�bFl^�;S^}Vu v0Z� GV(

�����3��� � � �,$�� " � + � � �1032*.U��Lf�b0fFZcbBf ��Z��0f��)Y[u � �LY����*�E]`_�f <ZcbBv �z]��pZ _a]��A�<|ef � ]D�L| �I��f � �LZcb0f�� Zg_�]`u.� �LY>:"f�b0fjuwv�_�]����L|ef���k]gb � ]D�L|��4�"f)�A�Ef�� Z��TZ�_a]��A�<|ef,v ��fj_2�0fj|edgf��&FPRu4�`�'����� YevTY�� "]D���0Y �<|ef vE] ��f���|[ZcbBf v ��f � ]`_a_�]`u <ZcbBv �Z�� �Ef<ZcbBZcvEf _�]��A�L|[f���kpZgu�� v �Lfju �A�0f.v ��f DD�NC �Lf���|[ZcbBZcv0Ye]`u vE]rY[_ �]gb0v,v ��f � ]`_a_a]`u 2Zcb0v �5Y[uA�0Y��Lf\Z_�]��A�L|ef ��f���|[Zcb9Zcv0Ye]`u &

U���f(�E}Vuwv0Z� ]��(Zgu DD�gC���f���|�ZcbBZcv0Ye]`u Y��4Z�� � ]`|�|e]/� �j��^�D>

�8�6�� ;�>g�A>g�2�D:c� !%!�+%D��gC +�>g�.:��

� ��f�b0f >g�.:�� _)�A�Ev(��fav �Lf.uLZg_�f\]��4Z���f���|[ZcbBf�� _�]��A�L|ef�&�U���f�DD�gC �Lf���|[ZcbBZcv0Ye]`u ��Zgu ��fav ��]D�A�D� v Z��Z �0Y�_ <|ef _aZ�� b0] f0 �2ZguA�0Ye]`u � ]`_\_aZguA�6k ��f���Z��A�Ef v �Lf���]��L} ]�� v ��f _a]��A�<|ef b0f� f�b0fjuA� f�� �^} Zgu�DD�NC� ]`_a_aZguA� Y���b0f<|�Z�� f�� vE]av ��f DD�gCI��f���|[Zcb9Zcv0Ye]`u &�����3������� �������,$�� " � + � � �%0 2,.

i _�]��A�L|ef Y���Zgu fjuA��Z�'� �L|[ZcvEf�� � ]`|[|[f�� v0Ye]`u ]�� ��f���|[ZcbBZcv0Ye]`u��&�j uA� f ��f>=<u�f��OkAZr_�]��A�L|ef ��Zgu ��fb0f��A�Ef�� Z��a_aZguw} v0Y�_�f��aZ��au�f�� f����0Zcb0}�& - ]����L|ef�� ��Zgu Zg| �E] ��f �E]rv �LZcvafjZ�� �KY[u��Ev0ZguA� f ]��TZ _�]��A�L|ef��Zgu b0f� f�b4vE]I�<Y�:"f�bBfju v��LZcv0Zad�Zg|��Lf��&7i _a]��A�<|ef ��Zgu � ]`u v0ZgY�u Y[uA�0v0ZguA� f��)]��p]gv ��f�b�_�]��A�L|[f���k�Zg|[|e]/��Y[u.��Z�EvEb��A� v �LbBZg| �LYef�b9Zcb����w}.vE]I�"f �'�LY[|ev&U���f(�E}Vuwv0Z� ]��(Za_a]��A�<|ef��Lf���|[ZcbBZcv0Ye]`u Y �4Z��"� ]`|[|e]/� �&

�':%8`��;%6 !%!+ �BWVQIYJZUR + >`��:�� ��+ ��+�>`��:�� +��=+�>`��:�� +��=+�^�w��>`��:�� + ��+ �� �A>`�

�8�6L� ;%>`�.>`�2��:g� �

� �c�A>g��8�6L�D;�>g�A>`�<�D:c� �

��>L�^� �(<g��8�6L�D;�>`�.>`�<�D:g� �

� �^�A>��6��8�6�� ;%>`�A>g�2��:g� �

� ��������8�6L�D;�>g�A>`�<�D:c� �

� �����.>`��8�6�� ;%>`�A>g�2��:g� �

� � ��6���8�6L�D;�>g�A>`�<�D:c� �

� � � 6��=<2�����.>`��8�6�� ;%>`�A>g�2��:g� �

��;`�A;�� �A6L��8�6�� ;�>g�A>g�2�D:c� �

� �D:����^�V�.6�8�6�� ;�>g�A>g�2�D:c� �

� .>���� �A6<�^��8�6L� ;%>`�.>`�2��:g� �

� 8�6�L���A6�8�6L�D;�>`�.>`�<�D:g� �

� �V�D>�8�6L� ;%>`�.>`�2��:g� �

U��Lf � ��(+*$Y[_a_�f��LY�ZcvEfj|e}�� ]`|[|[]/�MY[uA� v ��f*�gf�}=�;]gb�� + �BWVQgY ZUR +aY�� v ��f uLZg_�f Z�� �E]���Y[ZcvEf�� �MYev � v ��f_�]��A�L|ef�&0- ]��A�L|ef�uLZg_�f��GZcb0f"��b9Z �Mu)� b0]`_ Z��0f<ZcbBZcvEf)uLZg_�f"�$<Z�� f � b0]`_D]gv ��f�b uLZg_�f��GY[u v ��f Lb0]��gb9Zg_ kZguA� ��fju�� f _aZj} ��|[Z�� �`�MYev � uLZg_�f��a]���dcZcbBY[Z��<|[f���ZguA� ��f>=<u<Yev0Ye]`uA�&�U���f ]�<v0Ye]`uLZg|)|[Y��0v ]��TZcvE]`_2�.Y[u<Zcb0fjuwv ��f��Ef���Zcb0f v ��f � ]gbB_aZg|�2ZcbBZg_�f�vEf�b��.]�� v ��f _a]��A�<|ef�& � ��fju�f�dgf�b v ��f��0f�<ZcbBZg_af�vEf�b��\]�����b�Y[uf0 �<b0f�� �0Ye]`u�� �MY[v �LY[u v �Lf5_a]��A�<|efgk<v ��f�} Zcb0f5b0f<|[Z�� f�� �^} v ��f5Z�� v �LZg|0<ZcbBZg_�f�vEf�b �+� �LY�� � Zcb0f � �.�<|[Yef��� ��fju v �Lf,_�]����L|ef Y��4Y[u��Ev0Zgu v0Y�ZcvEf�� q �Ef�f(��fj|e]*�Fx &

iFu � � ��� � ��� ]�� Z�_�]��A�L|ef Y�� � b0fjZcvEf�� �A�BY[u.� v �Lf �JCgH ��f���|[Zcb9Zcv0Ye]`u�q �Ef�f S^f�� v0Ye]`u l�& G�&[hnl SVv0ZcvEfX ZcbBY[Z��<|[f�� m k.<Z��gf Ggl`x &AU��<Y�� ��f���|[ZcbBZcv0Ye]`u � �AA<|[Yef��;Z5uLZg_�f � ]gb)v ��f,Y[uA�Ev0Zgu�� fgkVZgu�� Zg|��E]�Z5|[Y��Ev;]��pZ�� v �<Zg|<ZcbBZg_�f�vEf�b ��kQ� �LY���� Zcb0f.Z�� �0Y �`u�f�� vE] v ��f2� ]gbB_aZg|0<ZcbBZg_af�vEf�b�� Y[u v �Lfa_�]����L|ef ��f>=<uLY[v0Ye]`u &&i�u Z�� v �<Zg|<ZcbBZg_�f�vEf�b*��Zgu ��f Zguw} |ef�`Zg|4f0 �LbBf�� �0Ye]`u & PRvaY���Zgu f�bBb0]gb\Y �Fv ��f u��L_ ��f�b�]�� Z�� v �LZg|"2ZcbBZg_�f�vEf�b��.Y���LY�:�f�b0fjuwv � bB]`_�v ��fMu��L_ �"f�b(]��?� ]gbB_aZg|.2ZcbBZg_�f�vEf�b��&(U��Lf��Efj_aZguwv0Y��)]��6_�]��A�L|ef)Y[uA�0v0Zgu v0Y[Zcv0Y[]`uaY�� �0Y�_aY[|[ZcbvE]���Zg|[|eWB�w}wW b0f� f�b0fjuA� f�&�?�]gb�f0 VZg_2<|efgkLY[u v ��f � ]`|[|[]/�MY[uA�)<b0]��gbBZg_ � bBZ��`_�fjuwv��

�BWVQIYJZUR � >�����w�^��JCgH> !��:%:�;%6�>c� � ! �:%: � > � ��w�^�

�BWVQIYJZUR �:�: � � �

Page 31: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�bFl^�;S^}Vu v0Z� GNO

C.��� D%E �� !��#" �

v ��f dcZcbBY[Z��2|ef)>.Y��MZ����0Y �`u�f�� v ��f dcZg|���f" &)U��LY�� �LY��Ev0Y[uA�D�LY�� ��f��;v ��f)��Zg|[| WB�^} W bBf� f�b0fju�� f _�f�� �LZguLY��0_ � bB]`_Z2��Zg|[| WB�^}wW d�Zg|��Lf(� ����fj_af�&<M]*� � ]`u��0Y���f�b)v ��f � ]`|[|e]*�MY[u.� LbB]��gbBZg_ �

�BWVQIYJZUR � >�����w�^�QJRUSLD=�IR

> !�� & ��JCgH !��>`� � > � ��w�^�

�BWVQIYJZUR �>`� � � �QJRUSLD=�IR

> !��#" �� !��!���

PRu v �LY � LbB]��gbBZg_ k�v ��f d�Zg|��Lf ]�� � Y�� &�&.jTu v ��f5]gv ��f�b �LZguA�6k?�A�0Y[uA�.Z*��Zg|[| WB�^} W uLZg_af _�f�� �LZguLY��B_ k�v ��fd�Zg| ��f ]�� � �;]D�L|�� ��f " kA�0Y[uA� f >f�z]D�<|�� ��f(� �.���Ev0Y[v ��vEf�� Z��MZgu f0 �Lb0f�� �BYe]`u � ]gb ��&?�]gb���Zcb�� b0f� f�b0fjuA� f��FvE] _�]��A�L|ef u<Zg_�f��TZcb0f Zg|�|e]/�;f��6k ����v ��Yeb���L|[Zcb�b0f� f�b0fjuA� f��TZcb0f5u�]gv�k6ZguA� bBf�� �L|evFY[uZgu f�b0bB]gb�&�����3������� �,$ 2 � ��� $/+ .

iFu ��82k�]gb,Y���fjuwv0YA=Lf�bjk�Y��TZgu f0 �Lb0f�� �0Y[]`u � �LY���� b0f� f�b0fjuA� f�� Zgu ]�� �Ef�� v&&j � � f�� v � ZcbBf5Y�uA�Ev0ZguA� f��T]��_�]��A�L|ef���kVdcZcbBY[Z��<|[f���kLZguA� ��f>=<uLf�� �E}^_ ��]`|��& U��Lf(�E}^uwv0Z� ]��pZgu Y���fjuwv0YA=Lf�b4Y��)Z�� � ]`|[|[]/� �&��8 !%!

>`��:��� +c��6�; +� ��8 +6��+�>`��:��� ��8 +��+ �w���.�'; 6

�6��D�V� +�� +

iFu � ��(?* Y���fjuwv0YA=Lf��Tv ��f�]��o� f�� v,]��;v �LZcv u<Zg_�faZ��(��f>=<uLf��rY[u Z �UCgH ]gb)QURUSLD=�UR���f���|[ZcbBZcv0Y[]`u &5PH�> Y���fjuwv0YA=Lf��FZgu Y[uA�Ev0Zgu�� f ]��AZ _�]��A�L|[fgk<v ��fju v ��f5f0 �Lb0f�� �0Y[]`u � >A� ��Y���fjuwv0YA=Lf��4v �Lf � ]`_2"]`uLfju vF]�� �Ef�� vuLZg_�f�� � �2]��GY�uA�Ev0ZguA� f � > � &)U��LY��)Y �"Lb0f���Y��0fj|e}�Zgu<Zg|e]��g]D�A��vE].Z��� f�� �0Y�u.�.Z2� ]`_2"]`uLfju v�]��GZ��EvEb��A� v �Lb0f���LZcv0Z v }��f�&.<�]gvEf�v �LZcv ZgurZ�� v �LZg|0<ZcbBZg_�f�vEf�b ]��;_�]��A�L|ef � > � ��ZgurY���fjuwv0Y � } Zgu�]gv ��f�b,_�]��A�L|[f Y[uA�0v0ZguA� f� �ek2Zg|[|e]/��Y[u.� � > �<vE]\Z��� f�� ��� ]`_ �]`u�fju v �4]�� � �ekLZ��MY�u v ��f(� ]`|[|e]/��Y[u.�5f0 VZg_2<|efg�

�BWVQIYJZUR � >�����w�^� �UCgH> ! �:%: � � � !�'>g� � > � ��w�^�

�BWVQIYJZUR �:�: � � �QJRUSLD=�IR� !��!�;� � � �z� � �

�BWVQIYJZUR �>`� � � ��JCgH

� !�A:�:�; 6�>����� !�A:�:�; 6�>����

PMf�bBfgk<v ��f dcZg|���f ]�� � � �LY��)v ��f,|e]��`Y ��Zg|6]gb4]�� � � �LZgu�� � ��� &

Page 32: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�bFl^�;S^}Vu v0Z� Ggi

P � � > �pY���fjuwv0YA=Lf��,Zgu Zcb0bBZj}gkGv ��f.f0 �<b0f�� �0Ye]`u � > � ��tY��Lfju v0YA=<f�� fj|efj_�fjuwv � �O]��4Zcb0bBZ=} � > � & PRv Y�� Zguf�b0b0]gb � ]gbzv ��fFf0 �Lb0f�� �0Y[]`u � �wvE] f�dcZg|��LZcvEfTvE] Z u��L_ ��f�b;]D��v �0Y��LfMv ��f � �.����� bBY Lv ��]D�LuA��� ]��tZcb0b9Zj} � > �ekV]gbvE].Z �E}V_ �"]`|�Y��Fd�Zg|��Lf�&PRv,Y�� �]D� �0Y �2|ef vE] bBf� f�b,v �LfauLZg_�f5v ��f2���b0bBfju v,_�]��A�L|[f)�LZ��(�"f�fjurY�uA�Ev0Zguwv0Y[ZcvEf�� vE] �^}4�A�0Y�u.� v ��f��6�; I���<Y[|ev0Y[u�Y���fjuwv0YA=Lf�b�&�BWVQIYJZUR 6�;%6��'6g�V� � >��:`�.6 � A6�;%:�5 � ��:D<A6c� ��JCgHG�:D<.6g� !A:�:�; 6�>����

C.��� D%E ��=����� � G�:D<.6g� � ! ����:D<A6c����A6�� � � G�:D<.6g� � ! ����:D<A6c� � �����QJRUSLD=�IR

>��:`�.6z� �.:�<A6g� � �=� !�� G.:D<.6g� �< �A>���� � :g�V� ! � A6�; :D5)�\<w�.>c��� � :c�����

�BWVQIYJZUR ��6�;�;�JCgH

6�@ ! 6�; 6�� 6c�����j��6�; � 6 " � &�� �6�" ! 6�; 6�� 6c����� 6 " � ��6�; � "�� �

QJRUSLD=�IR6�" � �.:D<.6g� � ��� ! ����:D<A6c� � �����< �A>���� � :g�V� ! � < �A>���� � ��� ��H6 "t�j<w�.>c�V� � :c�����

�BWVQIYJZUR � >�����JCgH���" ! �D6�;%;��

P u v �LY���f0 VZg_ 2|ef v �Lf5u<Zg_�f v �Lf.�D6�;%;�_�]��A�L|[f �LZ�����f�fju Y�uA�Ev0Zguwv0Y[ZcvEf�� vE] Y � <Z����Ef�� vE]�v �Lf ���.��W_�]��A�L|ef46�;%6�� 6c��� &KP u v ��f �?>V��� _a]��A�<|efgk"��f���|[ZcbBY[uA� ��" vE]���f ZguKY�uA�Ev0ZguA� f ]��,_a]��A�<|efr�D6�;�; ZguA���f>=<uLY�u.�4>��: ��6z� �.:D<.6g� � ��� Y[u _�]��A�L|[fI6�@Lk bBfjZg|[|e}rZg_�]D�Luwv �,vE]���f>=<uLY�u.� v ��fI�E}V_ �"]`|4��" �{��:D<.6g� � ���?&� �Lfju\}g]D�6kVY[u\v ��f,�D6�;�; _�]��A�L|efgk �Lf���|[Zcb0f�6 "�vE] ��fMZgu�Y[uA�0v0ZguA� fM]��O_�]��A�L|[f 6�;%6�� 6g�V�"k ZguA�\}g]D�*�Lf>=<u�f< �A>c�V� � :g��� Y[ur_�]��A�L|[f 6 "\vE] ��f�A6�; :D5)�\<w�.>c��� � :c���"k2}g]D� Zcb0f\b0fjZg|�|e}4��f>=2uLY[u.� Yev vE] ��f�v ��f��E}^_ ��]`|��" �j< �A>���� � :g�V� &�����3����� ��� $������� � 0 ���#"1$

U��Lf(�E}^uwv0Z� ]��(Z �`�'�����I<b0]��gbBZg_ Y��j��V�.:=< �A>=� !�!� : 8`�'; 6

�"� : 8`�'; 6

�@�^�w�� : 8`�'; 6

��

U��Lf�b0f\_)�A�Ev ��fa]`uLf._�]��A�L|ef;��Yev �rv ��f�uLZg_�f �?>V��� ZguA� uL] � ]gb9_aZg| <Zcb9Zg_�f�vEf�b��& U��Lf\_�]��A�L|ef� >���� Y���v �Lf,]`u�f f�dcZg|��LZcvEf�� �^}�v ��f Y[uwvEf�b Lb0f�vEf�b &�����3��� �� +-0 � $ .�.�$/.

oAb0]�� f����Ef�� Zcb0f �A�Ef��KvE] _�]���fj|�Y�u vEf�bB|[fjZjdVY[u.� � ]`u����b0b0fjuA� }�& i � ���o����� � Y��.Z�_�]��A�L|[f�� �LY ��� Y��Y[uA�Ev0Zguwv0Y[ZcvEf�� �A�BY[u.� v ��f �gf�}=�;]gb�� � ����:L��6<�^� �)q �Ef�f S^f�� v0Ye]`u l�& G�&[h l SVv0ZcvEf X ZcbBY[Z��<|ef��)m k <Z��gf�Ggl`x & U ��fLb0]��gbBZg_ f0 Vf����vEf��,Z*�EvEf��w} u�]`uVW ��f�vEf�bB_\Y[uLY��Ev0Y ��Zg|[|e} ����]^]D�0Y[u.� Z�Lb0]�� f�� ��k�v ��fju f0 ^f����v0Y�u.� Zg|[|t]��Av ��fZ�� �0Y �`u<_�fju v �Ev0ZcvEfj_�fjuwv � Y[u v �LZcv Lb0]�� f�� �,Y[u�<Zcb9Zg|[|efj| &5PRv,Y�� Y[_ <|�Y���YevMv �<Zcv Y �zZ �`YedgfjurdcZcbBY[Z��<|ef�Y�� u�]gvZ�� �0Y �`uLf�� �^}rv ��fI<b0]�� f�����kGv ��fju Yev � dcZg|���fab0fj_\ZgY[uA� �<uA���LZguA�gf�� & ~AZ�� ��Y[uA�Ev0ZguA� f\]��MZ LbB]�� f�� �)�LZ�� Z

Page 33: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�bFl^�;S^}Vu v0Z� G�F

�$�f���Y[Zg| ��]w]`|efjZgu.dcZcbBY[Z��<|efTZ�� �E]���Y[ZcvEf�� �MY[v �.Yev ��Zg|[|ef���� �w�^���=�D<�&GU���fFdcZg|���fF]��tv �LY��;dcZcbBY[Z��<|[f�Y��)" Y � ZguA�]`uL|e}aY �6v �Lf Lb0]�� f�� �;Y[uA�Ev0Zgu�� f�Y�� ���b0b0fjuwv0|e} �Efj|ef�� vEf��*� ]gb�f0 ^f����v0Y[]`u &7i Lb0]�� f�� �;_aZj}ab �Lua]`uL|[};� ��fju�Yev �<Zcb0fjuwv Y��Fb��LuLuLY�u.�.&MP u Z��A�LYev0Ye]`u u�] v[�;] Lb0]�� f�� �Ef��+�MYev � v ��f �0Zg_�f)<Zcb0fjuwv � _aZ=}���f b �LuLuLY[uA�\ZcvTv ��f�0Zg_�f,v0Y�_�f�&�����3���/� ��� �� ������ �*$ � " � + � � �%0 2,.

i ������� ��� �b�������������� �zb0f��EvEbBY�� v �Mv ��f ZcvEvEfjuwv0Ye]`u ]`uL|e}�vE] ������ ��� �/��� �"� �� � �������&�� ��fju f�dcZg|��LZcv0Y�u.��$�f���YA=���Zcv0Ye]`u���k�v ��f,_�]���fj| � ��f�� �gf�b � ]`uA�0Y��Lf�b�� <Zcv �T1��LZguwv0YA=Lf�b���vE]�Z�A<|e}.]`uL|e}\vE]I� ZgYeb <Zcv �A�&

� ������� � �.A�]gb0v � v[�;],v{}%�f��G]����sZgYebBuLf�� �0� ]`uA�EvEbBZgY[uwv ��k u<Zg_�fj|e}� �A�Ev0Y�� f"� ]`uA�0vEbBZgY[uwv �(ZguA� � ]`_ <Z�� �BYe]`u� ]`uA�EvEbBZgY�u v �&)i���� � �"� ���k������ ������� ��� ]`uA�0Y��0v �M]��;ZI� ]gbB_)�L|[Z T� �LY�� � Y��FZ�� � �<_�f�� vE]*��f vEb���f5Y[u =<uLY[vEfj|e}]�� vEfju Y[u.Zg|�|2v �Lf �sZgYeb <Zcv �A�&(P u*�`�'����� � �A�Ev0Y�� f � ]`uA�EvEb9ZgY[u v �)ZcbBfTY ��fju v0Y[=Lf��I�^}I�gf�}g�;]gb��A�$Y��NGLD �gR5Zgu��6k� ]gb �<Z�� �g�;Zcb � � ]`_ <Zcv0Y �2Y[|[Yev{}gkTSJCLD'H��IRA���.&fi^����� � ������� �� �������������� � � ]`uA�0Y��0v �T]��;Z <ZgY[bF]�� � ]gbB_ �<|[Z��� ��� �����pY�� LbB]�"f�bBv }4� Y�� vEb���f.Y[u =<uLY[vEfj|e} ]�� vEfju Y[urZ�� ZgY[b(<Zcv �6kpv ��fju Zg| �E] � ]gbB_ �<|[Z ���LZ��,vE]4�"f�vEb ��fY[u =<u<YevEfj|e} ]�� vEfju Y�u v ��f��sZgYeb22Zcv � &&PRu � �'������� ]`_2<Z�� �0Ye]`u � ]`uA�EvEbBZgY�u v �.Zcb0f Y��Lfju v0YA=<f�� �w} �gf�}g�z]gb���UW����UC.�%�BDNW�� & �

?LZgY[bBu�f�� ��� ]`u��EvEbBZgY[uwv �MZcb0f(�Lf���|[Zcb0f�� �A�BY[u.�5v ��f(� ]`|[|e]*�MY[u.� �E}Vu v0Z� ���>��c�`��6L�^�

�8�6�� ;�>g�A>g�2�D:c� !�!

+0SUCLD'H��UR.���?+��w���.��;%6�6������ �+ � +��

� +�'Y'�VGTD �NR + �w�j���'; 6�6��D�V� ��+��=+��

� +��UW����JC.�%�BDVWD� + + ��+ �w���.�'; 6�6��D�V� +��=+ �w���.��;%6

�6������ + ��+ �+ �=+��

i <Zcv �aY�� � ]`u��0Y���f�b0f��)�sZgYeb Y �"ZguA�5]`uL|e} Y �2Yev �0Zcv0Y � =Lf��(Zg|[|Vv ��f�� ]`u��EvEbBZgY[uwv � ��f���|[ZcbBf���Y[u5v �LY��(_aZgu<u�f�b�&1)� 1 2 q�� I 7 �aI(%;!670��351

U��Lf��$�f���YA=���Zcv0Y[]`uA� vE] �"f�����f����gf���]`u v ��f�? S.- ��Zgu ��faf0 �Lb0f����Ef�� Y�urv[�;] �<Y�:"f�bBfju v vEfj_ �]gbBZg||e]��`Y�����Tv ��f C ]`_2���v0Zcv0Ye]`urU b0f�f *O]��`Y � C U+* k6ZguA� v ��f�* Y[u�fjZcb,U fj_ �]gbBZg|#*O]��`Y���*VU+* f0 VvEfjuA��f��c��Yev �oGZ��Ev j��f�bBZcvE]gb��&FPRvFY��FZg|��E]*�]D� �0Y �2|ef,vE] ZguLZg|e}���f;1%�LZguwv0Yev0Zcv0Yedgf ���<ZcbBZ�� vEf�bBY��Ev0Y ��T]�� v ��f�? S.- �^}��$�f�� WY � }^Y[uA�\b0fjZg| W v0Y�_�f C U+* �$�f���YA=���Zcv0Ye]`uA��& S��f���YA='��Zcv0Ye]`uA����Zgu4��f)�]D�0Yev0Ye]`u�f����MYev �LY�u _�]��A�L|ef��jk2Y[u � �LY�� ���Z��Ef v �Lf�}�Zcb0f Lb0fLb0]�� f�� �Ef�� vE]ab0fjuLZg_�f v �Lf,d�Zcb9Y[Z��<|ef��)Z��� ]gb��<Y[u.��vE]av ��f � ]`u v0ZgY[u<Y[u.�2� ]`uwvEf0 ^v&

C U\* ZguA� *^U\* �$�f���YA=���Zcv0Y[]`uA�,Zcb0faf�dcZg|��LZcvEf�� �w}�� ������� Y[ur]gb ��f�b,vE]4�Lf�vEf�bB_aY[u�f�v �LfjYeb,vEb���v � ]gb� Zg| �0Yev } Y�u v ��f&? S.- & � ��fju Z*�$�f���YA=���Zcv0Y[]`u Y����LY�� � ]�dgf�b0f�� vE]���f � Zg|��0fgk'� ������� � ]`u��EvEb��A� v �TZguA��LbBY[uwv �Z2� ]D�LuwvEf�b0f0 �Zg_ <|efgk<YB& f�&AZ�vEbBZ�� f,]��Gv ��f)? S.-�v �LZcv � Zg|��BYA=Lf��;v ��f(LbB]�"f�bBv }�&��� ������ � � �� $�� ��� � � � �%0 2,.

i C U\* � "f���Y[=���Zcv0Ye]`u Y�� �`Yedgfju Z�� Z�� ]gb9_ �L|�Z Y[u v ��f\vEfj_ �]gbBZg|z|e]��`Y�� C U+* k Y[u vEbB]��A��� f�� �^}rv ��f�gf�}=�;]gb�� � � �UR���� & U���f(�0}^uwv0Z� ]��pv �<Y��"��f���|[ZcbBZcv0Y[]`u Y����

����6L��8�6L� ;%>`�.>`�2��:g� !�!�+����UR�� + ����6��

�6��D�V� ��+��=+��

����6L��6��D��� !�! �c�.;

�6��D�V�

U��Lf(�E}^uwv0Z� ]�� C U+* � ]gbB_)�L|[Z���b0f�� ]��`uLY ��f�� �^}.v ��f �`�'�����I2Zcb��Ef�bMY��)Z�� � ]`|�|e]/� �j����A;

�6������ !%!�w���.�'; 6

�6��D�V� ��� > �w���.�'; 6 �:%:�; 6�>c� 6��D�V�.6L�^�w��:g�

� + ��+ ���A;�6������ + ��+

� + ��+ ���A;�6������ ��� ;%: <<�^�D>�; �A: �

� �c�A;�6��D��� + + �c�A;

�6��D��� ��� ;%: <<�^�D>�; >��A8

� �c�A;�6��D��� + � + �c�A;

�6��D��� ��� ;%: <<�^�D>�; :`�

� �c�A;�6��D��� + ��: � + ���A;

�6������ ��� ;%: <<�^�D>�; 6��<�D;c�6� �c��6 : �

� g P <�>02[LO90C8C�2$P <FAB2{C�68R N7P N7TqEBG HJIBK?oULON7:;n?476868RSN7P LONWP06e<8C 47RSP\<�6]4JC�2 6890njn+N7C8<�2OQ NWP0VrD T NJC�������� Z?4J682YQ � ��� :;N Q02OVL{>02OL c�RSP0l0fq1325njV 4JP�<�NM4WQ0Q 6890njn+NJC8<=T NJCqLONW:;nj476868RSNWP�LON7Pj6e<8C 47RSP\<�6|47VS68NFT N7C�� ��� 68n+2OLOR��jLY4J<�RSNWP06|47PjQ�RSP���NW90P?Q�2YQ� N Q02OV���>j2OL c RSPjl}RSPM<�>02qPj2$m <dC�2$V 2O47682O6@N7T EBG HJIBK?f

Page 34: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�bFl^�;S^}Vu v0Z� lcm

� �c�A;�6��D��� + � � + �c�.;

�6��D�V� ��� ;%: <<�^�D>�; ���.��;��D6L�

� �c�A;�6��D��� +� � � + ���A;

�6������ ��� ;%: <<�^�D>�; 6��`�"�c�A>%;%6c���D6

� +0RJE +��c�.;�6��D�V� ���46��L�V���2��<.; : �>�;�; �

� +0R�� +��c�.;�6��D�V� ���46��L�V���2� ��6��w�����A>`��6

� +0RUS +��c�.;�6��D�V� ���46��L�V���2� <�=�'>%;�; �

� +>CUE +��c�.;�6��D�V� ��� �:`�A>�;%; <.; : �>�;�; �

� +>C�� +��c�.;�6��D�V� ��� �:`�A>�;%; ��6��w�����A>`��6

� +>CIS +��c�.;�6��D�V� ��� �:`�A>�;%; <�=�'>%;�; �

� +0R + + ��+ ���A;�6������ + Y0+ ���A;

�6������ +�� + ����6��<�^���"� �^���<� ;

� +>C + + ��+ ���A;�6������ + Y0+ ���A;

�6������ +�� + ��� �: �.>�;�;��^���<� ;

PRvAY�� Zguaf�b0b0]gb � ]gbAZgu\f0 �LbBf�� �0Ye]`uA�(Y�uaZ C U+* � ]gbB_)�L|[ZTvE])� ]`u v0ZgY�u\Z � ��6��w� � � �c]�"f�b9ZcvE]gbjkw]gbAvE] �LZ=dgfu�]`uVWB��]^]`|efjZgu � ]`_ �]`u�fjuwv ��kLY & f�& ���.�A� ]gbB_ �<|[Z�� � �LY�� � f�d�Zg|��<ZcvEf,vE].Z5dcZg|���f ]gv ��f�b�v �LZgu�&\]gb " &PRv�Y��MZg|��E]2�]D� �0Y��<|efTvE]��$�f���Y � } Y[u dcZcbBY[Zguwv ��k<YB& f�& LbB]�"]D�BYev0Ye]`uLZg|?� ]gbB_)�L|[Z���� �<Y���� _)�A�Ev ��]`|�� Y[uwdcZcbBY WZgu v0|[} Y�u v ��f,_�]���fj| & U���f(� ]gbBb0f��$�]`uA�LY[uA�)� ]`_a_\ZguA� Y�� � D=���UCgHA���UR����ek=��Yev � �E}Vu v0Z� ��� � 6L� <"�=���A>g�

�8�6L�D;�>g�A>`�<�D:c� !�!�+%D ���UCgH�� �UR�� +�� �j���';%6

�6��D��� + � +

U��<Y��"�Ev0ZcvEfj_�fjuwv � ]gb0bBf��$�]`uA�A��vE]� �UR � CUE � �j�.��;%6

�6������ + �=+

����v���Zgu��"f(� ��f�� �gf��4�^}�Z2� "f���Y�Zg|[Y���f�� Zg| �g]gbBYev �<_ �A��bBY�u.� bBfjZ����LZ��<Y�|[Yev } ZguLZg|e}��0Y���&��� ����� � � � �� $�� ��� � � � �%0 2,.

*VU+*4�$�f���YA=���Zcv0Ye]`uA�AZcb0fMY[uwvEb0]��A�A� f��)�w}5v ��f �gf�}=�;]gb�� � ZUGUZ.���IR ��� & U���f��0}^uwv0Z� �]��"v �<Y�� ��f���|[ZcbBZcv0Y[]`uY����;g�A;L����6��

�8�6L�D;�>`�.>`�<�D:g� !%!�+0ZUGIZA� �UR � + ;g�A;

�6������ �+ �=+��

� �Lf�b0f;g�A;

�6������ !%!�w���.�'; 6

�6��D�V� � � >D� �j�.��;%6 A:�:�;%6�>�� 6��D����6<�w�w�D:c�

� + ��+�;g�A;�6������ + ��+

� + ��+�;g�A;�6������ � � ; :=<L�^� >%; ��:`�

� ;`�A;�6��D��� + +�;`�A;

�6��D��� � � ; :=<L�^� >%; >c�.8

� ;`�A;�6��D��� + � +�;`�A;

�6��D��� � � ; :=<L�^� >%; : �

� ;`�A;�6��D��� + ��: � +�;g�A;

�6������ � � ; :=<L�^� >%; 6��L� ;��6�w���.6 : �

� ;`�A;�6��D��� + � � +�;`�.;

�6��D�V� � � ; :=<L�^� >%; �j���';V�D6<�

� ;`�A;�6��D��� +� � � +�;g�A;

�6������ � � ; :=<L�^� >%; 6��g�����A>�; 6g�"�D6

� ��SNY GgYUHJR� +�� +�;g�A;

�6������ � � �A6�� �����A>g�.6

� +>E +�;g�A;�6������ � ��<�;%: '>�;%; �

� +0S +�;g�A;�6������ � � L����>�;�; �

� ;`�A;�6��D��� + Y3+�;`�A;

�6��D��� � � �w���<� ;

� ;`�A;�6��D��� + � +�;`�A;

�6��D��� � � ��6�; 6�>L��6<�

� � �UC.�NG� + � +�;g�A;

�6������ � � �V�.6`�2�D:c�6�&���A>g�.6

� + � +�;g�A;�6������ � � �A: � �V�.6 �<�D:c�6�&���A>`��6 ��:`�

� + � +�;g�A;�6������ � � � �V���.: �<�^�D>�;�; �

� +'W +�;g�A;�6������ � �4:c����6

� ;`�A;�6��D��� + �?+�;`�A;

�6��D��� � � � ���"�D6

� ;`�A;�6��D��� +0G +�;`�A;

�6��D��� � � �w�2��<g<�6`�.6 8

P u �`�'�����"kN*VU+* �$�f���YA=���Zcv0Y[]`uA�0��Zgu ��f�Zgu<Zg|e} ��f�� ��]gv � �^} _�fjZgu��(]��L/ / /�WB�<Z��Ef��abBfjZ��E]`uLY[u.��k ]gb �w}_�fjZguA�M]�� S i(U�WB�<Z��Ef�� ��]D�Lu���f�� _�]��Lfj| ����f����^Y[uA�.&AP u v ��f)=Lb �Ev���Z��EfgkA� �������ILb0]�� f�f��A��Zg|e]`u.��v ��f |�Y[u�f����f�� � bBY��"f�� Y[u��"!#$�� ���"�$& ?�]gb�fjZ�����*VU+* �$�f���YA='��Zcv0Ye]`u6k(Z v0Z��2|efjZ���Z��<|ef\vE] b0f�� ]��`u<Y���f v ��f���f��LZ=d^Y[]gb��� Zg| �0Y � }^Y[uA� v ��f <b0]��f�b0v }�Y�� � ]`uA�EvEb��A� vEf��Ok<ZguA� v ��fju �E}VuA� ��b0]`u�]D�A�B|e}I� ]`_ �]D�Ef��S��Yev ��v ��f,_�]���fj| & � Y[v �

Page 35: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�bFl^�;S^}Vu v0Z� lVh

b0f��$�f�� v;vE];�"!#$ �'���"�Ek�v ��fTZ�ALbB]`Z���� Y�� � �L|[|[}5Y�u vEf�gbBZcvEf�� �MY[v �LY[u � �������2k^ZguA�.Zg|�|e]/� � � ]gb � �L|[|�vEbBfjZcv0_�fju v]�� <Z��0v;vEfj_2"]gb9Zg|<]��f�bBZcvE]gb���& PRu.v ��f ��Z��Ef ]��m/ / /�WB�<Z��Ef�� bBfjZ��E]`uLY[u.��k^v ��f � ]D�LuwvEf�b0f0 �Zg_ <|ef �gfju�f�bBZcvEf��vE] � ��]/��v ��f �sZg|��0Yev{},]��<Z�*^U\* �$�f���YA=���Zcv0Ye]`u _aZj})� ]`u v0ZgY�u)�0v0ZcvEf;dcZcbBY[Z��2|ef�� � �LY����)�LZ=dgf ��f�fju5Y[uwvEb0]��A�A� f���w} v ��f v0Z��2|efjZ���� ]`uA�0vEb��A� v0Ye]`u <b0]�� f�����b0f�&

P u v ��f �Ef�� ]`uA����Z��0fgk"Z��0Y[_aY[|�Zcb;v0Z��2|efjZ���� ]`uA�0vEb��A� v0Ye]`u Y�� ��Zcb0b9Yef�� ]D��v4vE].fjuA� ]���f v ��f f0 VY��0vEfjuA� f ]��Z�2Zcv � ]��4|[Y�_aYevEf�� |efjuA�gv � dVYe]`|[Zcv0Y[uA� v ��f*Lb0]��f�b0v }�&��`�'����� �gfju�f�bBZcvEf���Z4Lb0]��]D�0Yev0Ye]`u<Zg| �0Zcv0Y�� =<Z��2Y[|[Yev{}Lb0]��<|[fj_ k�v �LZcv4Y��)v �Lfju v0Z�� �V|ef�� �^} _�fjZguA�4]��GZgu f9RI��Y[fju vFS i(U �E]`|edgf�bb�54b! !768�(�)�$&

P u ��]gv � ��Z��Ef���k<v ��f,v0Z��<|efjZ���� ]`uA�EvEb��A� v0Y[]`uA�4Zcb0f � ]`_2<|ef�vEfj|e}�vEbBZguA�$2Zcb0fju v)vE]\v ��f �A�Ef�b &��� ��� � � $ ��" � ��� $ � � � � $ � � � � � � �1032*. ��2 � � 0 �! ��� � � �%0 2,.

� ������� Zg|�|e]/� � � ]gbFQMfjZg|pUMY[_�f C U\*�� "f���Y[=���Zcv0Ye]`uA�+��� ����h�(&)�$&��`�'����� Z�� � �L_af��Mv �LZcvFfjZ���� vEb9ZguVW�0Yev0Ye]`u v0Z��gf����<uLYev�v0Y[_�f(� ]gbMf0 Vf����v0Ye]`u &;QGU C U\* f0 VvEfjuA�A�4v �Lf �E}Vu v0Z� ]�� C U\* <Zcv � f0 �LbBf�� �0Ye]`uA���Yev �v ��f(� ]`|[|e]*�MY[u.� ��]D�LuA��f�� _�]��LZg|[Y[v0Yef����

�w�2�c�.;�6��D�V� !%!�c�.;

�6��D�V�

� +0R��US + �.>c�o<�6K�w�2�c�.;�6��D�V�

� +>C �US + �.>c�o<�6K�w�2�c�.;�6��D�V�

� +0R��JE + �.>c�o<�6K�w�2�c�.;�6��D�V�

� +>C �JE + �.>c�o<�6K�w�2�c�.;�6��D�V�

� +>C + +���+ �w�2���A;�6������ + �gY3+ �A>c�o<�6K�w�2���A;

�6������ +�� +

� +0R + +���+ �w�2���A;�6������ + �gY3+ �A>c�o<�6K�w�2���A;

�6������ +�� +

�.>c�D<�6 !%!.�^� � �6`� +6�w� + �w� ��A6 � +P u v �<Yev0Yedgfj|e}gk�Y[u v ��f � ]gbB_)�L|[ZfR�� � �gY *r�w� � � � *�q �Lk�b0f�� & x b0fLb0f��0fju v �)v �Lf,_aY[uLY[_)�L_ qs_aZ� �Y W_ �<_.x�u��L_ ��f�b)]��3�f�bB_aYevEvEf�� vEbBZgu��0Yev0Ye]`u Zg|e]`uA�\Z <Zcv � ]��(Z2�EvEb �A� v ��b0f ��f� ]gb0f v ��f f�dgfjuwv �LZg|[Yev{} �L]`|��A�&QMfjZg| v0Y�_�f C U+* �$�f���YA='��Zcv0Ye]`uA� ��Zgu4��f ��f>=2u�f��T�MY[v � v ��f � ]`|[|[]/�MY[uA�I�E}Vu v0Z� �k � �LY�� � f0 VvEfjuA�A��v ��f

�E}Vu v0Z� � ]gb C U+* �$�f���YA=���Zcv0Ye]`uA��&����6L�

�8�6L� ;%>`�.>`�2��:g� !�!�+����UR�� +r�w�2���A;

�6������ �+ � +��

�&Yev �rv ��f � �JW����gYJGUR��?�0v0ZcvEfj_�fju v�kGYev,Y�� Zg| �E] �]D� �0Y �2|ef vE]�� ]`_2���vEf 1��LZguwv0Yev0Zcv0Yedgf\Y[uA� ]gbB_\Zcv0Ye]`u ]`uv ��f ? S.- &pP u <ZcbBv0Y���L|[ZcbjkGYev5Y�� "]D���0Y �<|ef�vE] � ]`_ '��vEf.v �Lf.f0 �Z�� v �"]D�<uA� ]`u v ��f ��fj|[Z=} ��f�v[�;f�fju�v[�;]�$�f���YA=Lf�� f�dgfjuwv ��k<f0 �Lb0f����Ef�� Z�� C U+* � ]gbB_ �<|[Z��& U���f(�0}^uwv0Z� Y���v ��f(� ]`|[|e]*�MY[u.���

��:��.�w����6�8�6L�D;�>`�.>`�<�D:g� !%!�+��JW����NY GUR + ��:��.�w����6

�6��D�V� ��+��=+��

� �Lf�b0f��:��.�w����6

�6��D�V� !�!

+ �TD=� + +��+ �^�2���A;�6������ + �=+ �w�2���A;

�6������ +�� +

� + �JC�� + +��+ �^�2���A;�6������ + �=+ �w�2���A;

�6������ +�� +

�TD=��� ��� � ����� � � , � � ]`_ '��vEf��Av �Lf �Ef�v ]�� �Ev0ZcvEf��zb0fjZ����<Z��<|ef � b0]`_ ��� � ��� & PH��ZcvzZguw} �]`Y[u v�k �zf4fju�� ]D�Lu vEf�bZI�Ev0ZcvEf)�0Zcv0Y��$� }VY[u.�� � � , k-�zf,bBf�v ��bBu v ��f u%�L_ ��f�b)]�� �EvEf��4v0Z��gfju vE]\bBfjZ���� v �Lf �Ev0ZcvEf�&�PH�GZ =B ^f�� �]`Y[uwvY��)b0fjZ�� ��f�� Zgu�� u�]2�Ev0ZcvEf��FY[uwvEf�b��Ef�� v� � � ,pv �LfjuT� � F� ��� Y��)bBf�v ��bBu�f�� &�JC�� � ��� � ����� � � , �ab0f�v ��bBuA�Av ��f�|[fju.�gv �\]��6v �Lf�|e]`u.�gf��0v <Zcv �I� bB]`_�Z)�Ev0ZcvEfTY[u ��� � ���AvE] Z �Ev0ZcvEf Y[u� � � , &PH�Av ��f�b0f5f0 VY �Ev �TZgu Y�u =<uLYevEf <Zcv � �"f�`Y�uLuLY[u.�aY�u Z �Ev0ZcvEfaY[u ��� � ����v �LZcv u�f�dgf�bTb0fjZ����Lf��,Z��0v0ZcvEfaY[u� � � , kv ��fju � �� � � �e-�Y��)b0f�v ��b9u�f�� &

Page 36: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} l�G

� � ������%��� ������� %�����;�;� �8��� �&� �

U��Lfa_aZgY[u Y[uwvEf�bBZ�� v0Ye]`u _�]��Lf�]�� � �'����� Y��,v ��b0]D�.�D� Zgu Y[u vEf�b9Z�� v0Yedgf�� �Lfj|[| &5PRu v �LY�� _�]���f � �������fju vEf�b �aZ b0fjZ��VW f�dcZg| WBLbBY[uwv5|e]w]� & U���f �A�Ef�b ��Zgu Z�� v0YedcZcvEf v ��f dcZcbBYe]D�A�)� ������� � ]`_2���v0Zcv0Ye]`u �EvEf'��Z���E}��EvEfj_ � ]`_a_\ZguA�A�S�MY[v � �LY�:�f�b0fju v ]�<v0Ye]`uA�& U���f��0f �EvEf�� ��Zgu v ��f�b0f� ]gb0f ��frY[u dg]��gf�� �Ef<ZcbBZcvEfj|[}gk�]D� �0Y �<|[} �Lu���]`u�fa]gb b0f�fjZcvEf�� �<uA��f�b �<Y�:"f�bBfju v _a]��LZg|�Yev0Yef��& U���f��0f��EvEf�� Y[uA��| �A��f�v ��f*� ]`uA�EvEb��A� v0Y[]`u]��Av ��f�_�]���fj|3�LuA��f�b �LY�:�f�b0fjuwv 2Zcb0v0Yev0Ye]`uLY�u.�\vEf�� �LuLY�1���f���k6_�]���fj|3����f����^Y[uA� ]�� �$�f���YA=���Zcv0Y[]`uA��k�ZguA� v ��f� ]`u =A�D��b9Zcv0Ye]`u ]��Gv ��ff/ /�/ <Z�� �cZ��gf�&�U ��f Y[uwvEf�bBZ�� v0Yedgf � ��fj|[|O]�� �`�'����� Y��MZ�� v0YedcZcvEf�� � bB]`_ v ��f)�E}��0vEfj_Lb0]`_ <v4Z���� ]`|[|e]/� �,q � �`�'������� �LY���v �Lf ��f�sZ��L|ev �`�'�����*� ��fj|[|?LbB]`_ Lv9x9�

�$�"����6�������:���������� B�������I>C=G ^ _�`�a b

�`�'�������i �`�'����� � ]`_\_aZguA�\Y �(Z(�Ef 1���fjuA� f4]�� �;]gb��A�&GU���f;=Lb �Ev �z]gb �2�$�f���YA=Lf��(v �Lf�� ]`_a_aZguA�\vE](��f)f0 ^f����vEf�� &U���fabBfj_aZgY[uLY[uA� �;]gb��A� Zcb0f\Zcb �D�L_afju v � vE] v ��f\Y[uwdg]��gf�� � ]`_\_aZguA� & C ]`_a_aZguA�A� �Ef<ZcbBZcvEf�� �w}rZ � ���Zcb0faf0 Vf����vEf�� �0f 1%��fjuwv0Y[Zg|[|[}��Ov �Lf �`�'�����4����fj|[|8�;ZgY[v � � ]gb fjZ���� � ]`_\_aZguA�rvE] vEf�bB_\Y[uLZcvEfaY[u v ��b9u & U ��f��f��LZjdVYe]gb ]�� � ]`_a_aZguA��� ��Zgu ��f�fjuA� ]`u�fjuwd^Y[b0]`uL_�fjuwv d�Zcb9Y[Z��<|ef���k �0Y[_\Y[|[Zcb�vE] + ����0+ fjuwd^Y[b0]`uL_�fjuwvd�Zcb9Y[Z��<|ef��&

reset

goread_model

flatten_hierarchy

build_model

encode_variables

go_bmc

check_ltlspeccheck_invarcheck_trans

check_spec

compute_reachablesimulate

compute_reachable

check_ltlspec_bmcgen_ltlspec_bmccheck_invar_bmcgen_invar_bmcbmc_simulate

P u v ��f � ]`|[|e]*�MY[u.� �zf�Lb0f��Efjuwv�v ��f �]D� �0Y �2|ef�� ]`_a_\ZguA�A� � ]`|[|e]*�zf�� �^} v �Lf b0fj|[ZcvEf�� fjuwd^Y[b0]`uL_�fjuwvd�Zcb9Y[Z��<|ef���k%��|[Z�� �0YA=<f��aY[u �LY�:�f�b0fjuwv ��ZcvEf�g]gbBYef���& ~ dgf�b0}2� ]`_a_\ZguA�aZguA�)�;f�b��AvE] v ��f4]�<v0Ye]`u � � �^} LbBY[uwv0Y[u.�

Page 37: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} lgl

]D��v v ��f*� ]`_\_aZguA���A�0Z��gf�& � ��fju ]D��v$��Lv Y�� <Z��gf���� ]gb �E]`_�f � ]`_a_aZgu��A��q ]�<v0Ye]`u � ��x9k Yev Y�� <Y �f��v ��b0]D�.�D� v ��f)Lb0]��gb9Zg_ � "f���Y[=Lf����^} v ��f J�<MPji �JCIEIRIH�� ��fj|[|td�ZcbBY�Z��<|efgk�Y � ��f>=<u�f��Ok2]gbTv ��b0]D�A�D� J�<�P\i� ]`_a_aZguA� + _a]gb0f�+=& ~zu dVYeb0]`u<_�fju v�dcZcbBY[Z��<|[f��"��Zgu ��f,Z�� �0Y �`uLf�� Z�d�Zg| ��fb�MYev � v ��f\��6 ��� ]`_a_\ZguA� &

C ]`_\_aZguA�I�0f 1%��fju�� f��AvE] �`�'�����5_ �A�0v ]���f�} v �Lf q <Zcb0v0Y�Zg| xp]gb���f�b �$�f���YA=Lf��aY�u�v ��f\=��D��b0f ��f2Y�� vEf��Y[u v ��fILbBf�d^Ye]D���(<Z��gf�& ?�]gb�Y[uA�Ev0ZguA� fgk(Yev Y�� u�]gv �]D� �0Y��<|ef�vE] f�d�Zg|��<ZcvEf C U\*Kf0 �Lb0f����0Ye]`uA� �"f� ]gb0f.v ��f_�]���fj|OY�� ���<Y[|ev&U��Lf dgf�b ��]D�0Yev }�]��0�`�'������Y��"� ]`u vEbB]`|[|ef�� �^}.v �Lf(� ]`|�|e]/�MY�u.�5fju dVYeb0]`uL_afju v)dcZcbBY[Z��<|[f�&

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef����������� � �������C ]`uwvEb0]`|��;v ��fFdgf�b ��]D�0Yev }�]��tv ��f��0}��EvEfj_ & o ]D���0Y �<|ef�d�Zg| ��f��zZcbBfFY[uwvEf�gf�b�� � b0]`_ m�qsu�]5_�f�� �BZ��gf��9xAvE], q � �L|[|6_�f�� �BZ��gf��9x &zU��Lf(��f� Z��<|ev�d�Zg|��Lf,Y��)m�&

] � � H � *��A/ ��� %)*a793&^�%435*sp @�79/0*a793&^U��Lf � ]`|[|e]/��Y[u.� � ]`_a_\ZguA�A�;Zg|[|e]/� � ]gb;v ��f�<Zcb��0Y�u.� ZguA�\v ��f�� ]`_2<Y[|[Zcv0Ye]`ua]��Ov ��f�_a]���fj|2Y[uwvE] / / / &

C ]`_a_aZgu��������� ����������� % � ��6�� ��� � �o �� �F� � �� � ��� � �o ������6�> 8��':%8�6�; � � � ��� � � � :%8�6�; � <�D;%6 �Q4fjZ��A� Z�<��2S.- Xn=2|ef�&,P � v ��f � �\]�Lv0Ye]`urY��Tu�]gv �$�f���YA=<f��6k"Y[vFbBfjZ��A� � bB]`_�v �Lf�=<|ef �$�f���YA=Lf�� Y[uv ��f,fjuwd^Y[b0]`uL_�fjuwv)d�Zcb9Y[Z��<|ef ���%�^�V�

�L� ; 6�&

C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� � � :%8�6�; � <�D;%6S^f�v � v ��f fjuwdVYeb0]`uL_�fjuwv dcZcbBY[Z��<|[f �=���^�V�

�<� ; 6 vE]�� : 8�6�; � L� ;%6Lk ZguA� b0fjZ��A� v ��f_�]���fj| � b0]`_ v ��f(�$�f���YA=<f�� =<|ef�&

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef� ��!#"%$ & � �S^vE]gb0f��Gv ��f)uLZg_af;]��2v ��f)Y[u.��Lvm=<|ef � ]`uwv0ZgY[uLY[u.�Fv ��f)_�]���fj| &pP{v ��Zgu ��f �Ef�v0�w} v ��f � ��6 ���� ]`_a_aZgu��]gb �^}.v �Lf � ]`_a_aZguA� |[Y[u�fT]�Lv0Ye]`u � � � � &zU���f�b0f,Y��)uL]I��f�sZ��L|ev�d�Zg| ��f�&C ]`_a_aZgu��' � $($ � � )�� �����*�,+ ).- �0/ � ��� � ���� ��� � �D� �������9� � � ����� �-6 �(� ���

�;�>`�w�.6c��� �D6`�A>`�<� � � � � � �U��LY�� � ]`_a_aZgu�� Y��;b0f��$�]`uA�0Y �2|ef)]��tv ��f Y[u��Ev0Zgu v0Y�Zcv0Ye]`u�]�� _�]��A�L|ef��zZguA� Lb0]�� f�� �Ef���& U���fTY[uA�Ev0Zguwv0Y WZcv0Ye]`u Y����f�b � ]gbB_�f����w} ���.���Ev0Yev �Lv0Y[u.�av ��f Z�� v �LZg|3<ZcbBZg_�f�vEf�b � � ]gbFv ��f � ]gbB_aZg| <ZcbBZg_�f�vEf�b ��k6ZguA�v ��fju �^}*Lb0f>= �Y[u.� v ��f,b0f����L|ev�d^Y�Z5v ��f Y[uA�0v0ZguA� f,uLZg_�f�&

C ]`_a_aZgu�� ) ��1 ���*�,2� ��� �43 � � � 6��0�65 � � � �87 ����� � 4����Z� �97(� ��� �� 6 ��� �0�� 4 ��� � ���� � :D5��.>`�"� � � � ��� � � � � � � ��� � � � � :*:g�V� �w��� � <�D;%6��o bBY�u v �*�E}V_ ��]`|[Y�� Y[u.��Lv\ZguA� �Ev0ZcvEf d�Zcb9Y[Z��<|ef��.]��,v ��f _�]���fj| ��Yev � v �LfjYeb.b9Zgu.�gf ]��,d�Zg| ��f�� qsZ��

��f>=<u�f�� Y[u v ��f,Y[u.'��v�=<|ef�x &C ]`_a_aZgu�� j�Lv0Ye]`u����� � o bBY�u v �)]`u<|e}��Ev0ZcvEf d�Zcb9Y[Z��<|ef��&� � o bBY�u v �)]`u<|e}.Y[uA���v�d�Zcb9Y[Z��<|ef��&� � oAY �f��Fv ��f�]D��v$'��vTvE] v ��f Lb0]��gbBZg_ �$�f���YA=Lf�� �w} v ��f��JCIEIRgH � ��fj|[|pdcZcbBY[Z��<|ef5Y � ��f W

=<u�f��6k�fj| �Ef v ��b0]D�.�D� v ��f�Y��TD ��� ]`_a_\ZguA� +�_�]gb0f�+�&� : :g���D�^�V� � L� ; 6�rbBYevEf��Mv ��f,]D��v$��Lv"�gfju�f�bBZcvEf�� �^}�v ��f � ]`_a_aZgu�� vE]�:g�V� �w��� � <�D;%6

Page 38: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} l�,

C ]`_a_aZgu��� � +9����� ���*� � �*�#� �� � 4�� ���76 � ��� �+4���� 4 ���Z���97(� ��� �/����� ����� � � � ����� � ��� � ��� �� � 6��0� � � �k4������

6c���D: 8�6��A>g�2�D> '; 6<� � � � � � � � :`��8�6 � � <�D;%6��

�Ffju�f�bBZcvEf��4v ��f ��]^]`|efjZgu / /�/ dcZcbBY[Z��<|ef��;ZguA��v ��f6i / / u�f�f���f��.vE]5fjuA� ]���f Lb0]��]D�0Yev0Ye]`u<Zg|[|e} v ��fq �E}V_ ��]`|[Y��=xzdcZcbBY[Z��2|ef��"��f���|[Zcb0f�� Y[u v ��f,_�]���fj| &U���f�d�Zcb9Y[Z��<|ef�� Zcb0f � b0fjZcvEf���Z�� ��f� Z��<|ev Y[u v ��f�]gb���f�b�Y[u�� �LY���� v ��f�} Z��"fjZcb5Y[u Z �LfLv � =<b��EvvEbBZjdgf�b �0Zg|t]��pv ��f �<Yef�bBZcb�� � }�&U���f�Y[u.'��vM]gb��Lf�b�=2|ef)��Zgu���f <Zcb0v0Y�Zg| ZguA� ��Zgu � ]`uwv0ZgY[u dcZcbBY[Z��<|[f��FuL]gv �Lf���|[Zcb0f�� Y[u v ��f�_�]���fj| &X ZcbBY[Z��<|[f��Au�]gv ��f���|[Zcb0f��.Y[u�v ��fF_�]��Lfj|LZcb0f �BY[_ <|e})�LY�� ��Zcb ��f�� &pX ZcbBY[Z��<|ef�� ��f���|[Zcb0f��.Y[u�v ��fF_�]���fj|� �LY�� � Zcb0f u�]gv�|[Y��EvEf�� Y[u v ��f ]gb���f�bBY[uA�5Y�u.���v�=<|ef+�MY[|�|'��f � b0fjZcvEf�� ZguA� Z�A�fjuA��f�� ZcvMv ��f fjuA� ]��v ��f(�`Yedgfju ]gb���f�bBY[uA�a|[Y��Ev�k�Z��� ]gb��LY�u.��vE]av ��f �Lf� Z��L|[v;]gb ��f�bBY[u.�.&C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� ��: ��8�6 � � <�D;%6S^f�v �Tv ��f fju dVYeb0]`u<_�fju vFdcZcbBY[Z��<|ef\�=���^�V�

�: ��8�6 �

�<�D;%6�vE] : ��8�6`� � L� ; 6<k2Zgu�� b0fjZ����v ��fTd�Zcb9Y[Z��<|efF]gb���f�bBY�u.� vE] ��f �A�Ef��*� bB]`_ =2|ef : ��8�6 � � <�D;%6A&GU��LY � ��Zgu ��f � ]`_ �<Y�u�f��

�MYev �rv �Lf 5^�2���.6�: ��8�6 ��� ]`_a_aZguA� &aU���f�dcZcbBY[Z��<|ef5]gb��Lf�bBY[u.� Y��+�MbBYevEvEfjurvE] Z�=<|efgk

� �LY�� � ��Zgu ��f,Y[uA� "f�� vEf�� Zgu�� b0f�]gb���f�bBf�� �w}�v ��f(�A�0f�bjkLZguA� v ��fju b0fjZ�� �<Z���� Y[u &~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef� ��!#"%$ ��� ����� & � �PRu��LY���ZcvEf��4v �Lf)=<|ef u<Zg_�f � ]`uwv0ZgY[uLY[u.��v �Lf dcZcbBY[Z��<|efT]gb��Lf�bBY[u.��vE]��"f �A�Ef�� Y[u ���LY[|��<Y[u.� v �Lf _�]���fj|

�w} v ��f � 6g����:%8�6��.>`�<� > �;%6L���%� ]`_\_aZguA� & U��Lf�b0f,Y��4u�]2�Lf� Z��L|[v;dcZg|���f�&

C ]`_a_aZgu��1 � � $ � ���,��� � ��� �Z� � ��� 4 ���Z���97 � � � � 6���� � � �-� � �5^�2�c��6

�: ��8�6 � � � � � � � � : � � �� :`��8�6`� � <� ; 6��

�rbBYevEf��5v ��f ���b0bBfju v ]gb���f�b ]��\/ /�/�dcZcbBY[Z��<|ef�� Y[u v ��f =2|ef��$�f���YA=<f�� dVY[Z v �Lf\W ] ]�Lv0Ye]`u & P �4u�]]�Lv0Ye]`u Y��)�$�f���YA=Lf�� v ��f fjuwd^YebB]`uL_�fjuwv dcZcbBY[Z��<|[f :g�V� �^�V��: ��8�6 �

�<�D;%6S�MY�|[| ��f � ]`uA�0Y���f�bBf�� & PH�v ��f4dcZcbBY[Z��<|[f :c���D�^���

�:`��8�6`�

�<� ; 6�Y�� �Lu��Ef�vMq ]gb �Ef�vAvE] Zgu�fj_ <v }5d�Zg| ��f�x v ��fjuI�0v0ZguA�LZcb��5]D��v$'��v

�MY[|[| ��f(�A�Ef�� &C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� : : ��8�6 � � <�D;%6S^f�v � v ��f�fjuwdVYeb0]`uL_�fjuwvTd�Zcb9Y[Z��<|ef :c��� �w���

�: ��8�6`�

�L� ; 6\vE]�: ��8�6`� � L� ; 6�ZguA� v �Lfju�A�L_ '��v ��f ]gb���f�bBY�u.�a|[Y��Ev)Y[uwvE]�v �LZcv+=2|ef�&

� : ��8�6 � � <�D;%6i�|�Y[Z��"� ]gb)W ]a]�Lv0Ye]`u &zS��.A<|�Yef��I� ]gb��<Z����=��Zcb��4� ]`_ <Zcv0Y �<Y�|[Yev }�&~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef� "%$4!#"%$ ��� ����� & � �U���f =<|[f � ��f�b0f v ��f ���b0bBfju v dcZcbBY[Z��<|[f ]gb��Lf�bBY[u.� �LZ�� vE] ��fc�4bBY[vEvEfju &�U ��f ��f�sZ��L|ev d�Zg| ��frY��

� ��6��.�)�7:`��8� &C ]`_a_aZgu��� "�� � � ��������� � ! ��� � ��� ��� ��� ��� ��� � �� � 6 �D� �������9� � �S�� � �k4����

w��� ;D8�� :%8�6�; � � � � � � �� � � � �A6`� � : 8��

C ]`_ <Y�|ef�� v ��f �<ZcvEvEfju�f����LYef�bBZcb�� � }rY[uwvE] / / /�qsY�uLYev0Y[Zg| �Ev0ZcvEf��jk Y[u dcZcbBY[Zguwv ��kpZguA� vEb9ZguA�0Yev0Ye]`u b0f W|[Zcv0Ye]`u2xI�A�0Y�u.� v ��f _�f�v ��]�� �$�f���YA=Lf�� Y�u v ��f fjuwd^YebB]`uL_�fjuwv\dcZcbBY[Z��<|ef ��>`�^�<�c�<�D:g���'6 � � :%8 � ]gb

���LY[| �LY[u.� v ��f,vEbBZguA�BYev0Ye]`u�b0fj|[Zcv0Ye]`u &C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� �4�A6 � � : 8

S^f�v � v ��f\fjuwdVYeb0]`uL_�fjuwv,dcZcbBY[Z��<|[f ��>`�^�<�c�<�D:g���'6 � � :%8 vE] v ��f\dcZg|���f �A6 � � : 82kGZguA�v ��fju ���LY[| �A�rv ��fKvEbBZguA�0Yev0Y[]`ub0fj|�Zcv0Ye]`u & i�dcZgY[|[Z��<|efK_�f�v ��]��A� ZcbBf �A:c��:�;V�c� � �^�^k

G � �.6L� � :�; 8aZguA� D 5A;L� � ��� &

Page 39: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} lgn

� ?�]gb�� f��F_�]���fj|?� ]`uA�EvEb��A� v0Y[]`u &7/;}*��f�sZ��L|ev�k�]`u<|e}a]`u�f(2Zcb0v0Yev0Ye]`u _�f�v ��]�� Y��)Zg|[|[]/�;f�� &U��LY��O]�Lv0Ye]`u,Zg|[|[]/� �6vE]�]=dgf�b�� ]`_afzv �LY � ��f�sZ��L|ev�k�Zgu�� vE] ���<Y[|���v ��f vEbBZguA�BYev0Ye]`u b0fj|�Zcv0Ye]`u�MYev � �<Y�:"f�bBfju v <Zcb0v0Y[v0Ye]`uLY[u.��_�f�v �L]��A��&

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef! �*� $�� $�� � � ��� $�) ���U���f�_�f�v ��]�� vE]���fI���Ef�� Y[u ���LY[|��<Y[u.�\v �Lf\vEbBZguA�BYev0Ye]`urb0fj|�Zcv0Ye]`u6kGZguA� vE] � ]`_ ���vEf�Y[_aZ��gf�� ZguA�Lb0fjY[_\Z��gf��&Aop]D� �0Y �2|efTd�Zg|��Lf��4Zcb0fg�? �cJ(CDJ(L>I>G)YDI�E &�<�]2<Zcb0v0Yev0Y[]`uLY[u.�5ZcvMZg|[| &?�� YDWHM�N)YDJ(L � & C ]`u��$�<uA� v0Yedgf�<Zcb0v0Yev0Ye]`u<Y[u.��kg�MYev � Z �0Y[_ <|[fMv ��b0f�����]`|��*��f���bBY��0v0Y���&!i � �BY �`uL_�fjuwv �Zcb0f�� ]`|[|[f�� vEf�� Y[u Z �BY[u.�`|ef ��|��A�0vEf�bI�Luwv0Y[|)Yev � �0Y���f��gb0]/� �\]=dgf�b.v ��f dcZg|���f �$�f���YA=Lf�� Y�u�v ��fd�Zcb9Y[Z��<|ef �D:c���

��'>g�^�

�� � �.6<� � :�; 8'& PRv Y�� �]D� �0Y��<|ef q ��f� Z��<|ev9xFvE]4���EfaZ�R\uLYev{} ��|��A�EvEf�bBY�u.� vE]Y[_ LbB]=dgf _�]���fj| � ��f�� �VY[u.�2�f�b � ]gbB_aZgu�� f�&zS^f�f)> �<�=���c���adcZcbBY[Z��2|ef�&

?��Y�#L�N ������ & C ]`u�� �LuA� v0Y[dgf <ZcbBv0Yev0Ye]`uLY[uA��k*�MY[v �)��| �A�EvEf�b��3�gfju�f�bBZcvEf��\ZguA� ]gb���f�b0f��5Z��� ]gb��LY�u.�TvE]v ��f ��f���bBY��0v0Y��"��f�� � bBY��"f��\Y[u �5%��� ,F�� ��$& �r]gb�����Y[u2� ]`u��$�Lu�� v0Ye]`u ��Yev ��v ��fFd�Zcb9Y[Z��<|ef��4���?> <�6��D;c�6���.6`�

�� � � 6<kz���?> <�6 ��� "`k;�j� > <�6 ��� @Lk��j� > <�6 ��� �<k;���?> <�6 ��� #�& PRv�Y��)"]D���0Y �<|ef q ��f� Z��<|ev9xvE] �A�Ef Z�R.uLYev } ��|��A�0vEf�bBY[u.� vE] Y[_ <b0]=dgf _�]���fj| ���Lf�� �VY[u.� �f�b � ]gbB_aZguA� f�& S^f�f > L���"�c� �d�Zcb9Y[Z��<|ef�&;P{vFY��MZg| �E]2�]D� �0Y �2|efTvE].Zjdg]`Y � q ��f�sZ��L|ev9x"Lb0f�]gb��Lf�bBY[u.��]�� ��|��A�0vEf�b�� q �Ef�f;�5%��� ,-�� ��Ex

�A�0Y[uA�.�=5�;�� � �����6�:`��8�6`��dcZcbBY[Z��<|[f�&~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef+9� ��� ! ��� $ $�) ���� ) �� �U���f5|[Y[_aY[v4]��Av ��f �0Y���f ]�� ��|����EvEf�b��TY[u � ]`u��$�<uA� v0Yedgf)<Zcb0v0Yev0Ye]`u<Y[u.�.&�U ��f)�Lf� Z��L|[vMdcZg|���f5Y���m / / /u�]���f��&~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef��� ��� $ -~AuLZ��2|ef�� Z�R.uLYev } ��| �A�EvEf�bBY[uA����f���bBY �Ev0Y�� ��f�� � b9Y ��f�� Y[u �� ����#�'&(&)�Ek �]D� �0Y��<|ef�dcZg|���f�� Zcb0f�m ]gb h�&U���f(��f�sZ��L|ev)dcZg|���f,Y � h�&~AuwdVYeb0]`uL_�fjuwv�X ZcbBY[Z��<|[f��� ������ + � " $ ��� ��� ��� � ������� �! �"#�%$&�(')�+*-,U���f <ZcbBZg_af�vEf�b��(vE](� ]`u =A�D�Lb0f�v ��f"��f��LZjdVYe]gbG]��<v ��f�.0/;, �214365�7 <ZcbBv0Yev0Ye]`uLY[uA��Zg| �g]gbBY[v �L_ &z���?> <�6

��D;c�6���.6`��� � � 65Y �"�A�Ef�� Z��)v �Lb0f�� ��]`|�� dcZg|���f � ]gb4v ��f(��|����EvEf�b��& U��Lf(��f� Z��<|ev�d�Zg|��Lf,Y�� h�mgmgm / / /u�]���f��& U���f ]gv ��f�b22ZcbBZg_�f�vEf�b��aZcvEvEb9Y ����vEf �LY>:"f�b0fjuwv3�zfjY��D� v ��vE]rv �Lf �LY�:�f�b0fju v �sZ�� vE]gb��aY�u�v ��fZg| �g]gbBYev �<_ & U ��f���f�sZ��L|ev�dcZg|���f��.Zcb0f (^k,hck hck GrbBf��$�f�� v0Yedgfj|e}�&�q ?�]gb Z ��f�v0ZgY[|ef�� ��f�� � bBY�Lv0Ye]`u6k

<|efjZ��Ef b0f� f�bMvE] �5%��� ,-�� ��$& x~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef� 1 � �8-9 ! �������,�%���~AuLZ��2|ef�� ��|��A�EvEf�b Lb0f�]gb ��f�bBY[u.� � ]`|�|e]/�MY�u.� ��f��LbBY��Ev0Y�� ��f�� � bBY ��f���Y[uS�5%��� ,-�� ��Ek."]D���0Y �<|ef�d�Zg| ��f���Zcb0fm�]gb h�&zU���f(��f�sZ��L|ev�dcZg|���f,Y��)m�&;o b0f�]gb��Lf�bBY[u.� ��Zgu ��f dgf�b0} �0|e]*�(&

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef� ������ ��������� � $ -S^f�v �zv ��fMdgf�b ��]D�0Y[v } � ]gb;v ��fFY[_aZ��gf�_af�v ��]��;: 3 � �9�� g!-�Mk�"]D���0Y �<|ef)dcZg|���f��zZcb0f & ]gb)"D&(U��Lf ��f�sZ��L|evd�Zg| ��f,Y�� &�&C ]`_a_aZgu��! � � �.$ � 1 � �8&9�� !�$�� � � � � �Z�� � � ��� �<: 37���9�� =� � �"� �� � �

�V�2���V���=5�;�� � %:��V�2��:g�6� � � � �U��LY�� � ]`_a_\ZguA� LbBY[uwv � ]D��v5v ��f � ]`u =A�D��b9Zcv0Ye]`u�<ZcbBZg_�f�vEf�b��a]��Mv ��f P � *GS.Fgn���|��A�EvEf�b9Y[u.� Zg|��g]cWbBYev �L_ kLY & f�&����?> <�6

��.6 � �:L�w�c���"kL�j� > <�6

��D;c�6���.6`�

�� � � 6 ZguA� �j�?> <�6 ��� " ��@ � � �O#'&

C ]`_a_aZgu����� � : D� �"�������?> ��� ��� � � ����� � � � � � ��� � 4 ���Z� � �����"� ��*�<�:�� � � �U��LY�� � ]`_\_aZguA� Y[u<Yev0Y[Zg|[Y���f�� v ��f��0}��EvEfj_ � ]gbadgf�b9YA=���Zcv0Ye]`u & PRvaY��5f 1��LYedcZg|efjuwv�vE] v ��f � ]`_a_aZgu���Ef 1���fjuA� f ��6�> 8

��':%8�6�;Lk �;�>g�^�.6c�

�� �D6`�A>g�2� � �"k 6g�"�D:%8�6

��A>`�<� >�';%6L�^k�^�"� ; 8

��':%8�6�;Lk�w���D; 8

��;�>`���':%8�6�;Lk�^�"� ;D8

�A:�:�;%6�>��

�� :%8�6�;.&�P � �0]`_�f � ]`_a_aZguA��� �LZjdgf Zg|eb0fjZ���} ��f�fju&f0 ^f����vEf��Okv ��fju ]`u<|e}\v ��f b0fj_aZgY[uLY�u.� ]`uLf��#�MY[|�|���f,Y[uwdg]��gf�� &

C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�

Page 40: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} lV(

� �o bBY�u v �)v �Lf(� ]`_a_aZguA� ���0Z��gf�&

C ]`_a_aZgu��! ����+9��( ��������� � � ����� � ��� � ��� ��7����j� ����� � � � �� 6���� �� ����� � ���� ���� ������� � � ��� �� � �����=� �"� 4 � ��� �0��� �

�V�.:L��6<�w���':%8�6�; � � � � � � �,� : 8�6�; � L� ; 6�� � � � �.6 � � :%8��

Q4fjZ��A�4v ��f _�]��Lfj|�k�� ]`_2<Y[|ef���Yev�Y[uwvE]&/ / / ZguA� �f�b � ]gbB_2�zv ��f _�]��Lfj| � ��f�� �VY[u.��]��pZg|[|"v ��f �$�f���Y W=���Zcv0Ye]`u � ]`uwv0ZgY[u�f�� Y[u�Yev&GPH�tv ��fTfju dVYeb0]`uL_afju v;d�Zcb9Y[Z��<|ef��: � 5�>`��8

���6�>g�2� � �LZ�� ��f�fju��Ef�v ��f� ]gb0fgkv ��fju v ��f �0f�v ]���b0fjZ�� �LZ��<|ef �Ev0ZcvEf��GY��3� ]`_ ���vEf�� & P ��v ��fAfjuwdVYeb0]`uL_�fjuwvtdcZcbBY[Z��2|ef�� 6g��> '; 6

��.6�:`��8�6 �ZguA� �.6�:`��8�6 �

�� 6`� � : 8 ZcbBf��Ef�v�kGv ��fju v ��f\b0f�]gb ��f�bBY[u.� ]��)dcZcbBY[Z��2|ef��,Y�� "f�b�� ]gbB_af�� Z��� ]gb��LY[uA�`|e}�&U��LY�� � ]`_a_\ZguA���0Y[_)�L|[ZcvEf��Fv ��f �<Zcv � ���"f��<ZjdVYe]gbT]���<��2S.- X�ZguA� v ��fju b0f�v �LbBuA�Fv ��f � ]`u vEbB]`|GvE]v ��f Y[uwvEf�bBZ�� v0Yedgf � ��fj|[| &

C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� � � :%8�6�; � <�D;%6S^f�v ��v ��f,fjuwd^YebB]`uL_�fjuwv4d�Zcb9Y[Z��<|ef ���%�^�V�

�L� ; 6avE] =<|[fM�':%8�6�; � <�D;%6<k^ZguA� b0fjZ��A�Mv ��f_�]���fj| � b0]`_ =<|ef4� : 8�6�; � L� ;%6A&

� �4�A6 � � : 8S^f�v �5v ��f fjuwd^YebB]`uL_�fjuwv dcZcbBY[Z��<|[f2�'>g�^�2���2��:g�

�� 6`� � : 8 vE]4�A6 � � : 8rZgu������Ef���Yev5Z��

<Zcb0v0Yev0Y[]`uLY[u.��_�f�v ��]�� &] � � # �F8?8:%435*�1 �j����# l5� I�� 7B3&^ 2 q�� I 7��aI(%;!�7B��351

U��Lf � ]`|[|[]/�MY[uA� � ]`_\_aZguA�A�4Zg|�|e]/� � ]gb4v ��f / / /�WB�<Z��Ef�� _�]���fj| ����f����^Y�u.�\]��GZ � ��������_�]���fj| &C ]`_a_aZgu��+9�� !#"%$ � ������+ ) ����� � � ! ��� � � � ��� ��� � ����� ��� � � �=� � �97(� � ��� ��� �����:��.�w����6

���6�>V� � >�'; 6 � � � �

C ]`_ ��LvEf��Gv ��f��Ef�v(]��<bBfjZ����LZ��<|[f��Ev0ZcvEf��& U���f�b0f����L|evGY��pv ��fju �A�Ef��5vE](�0Y�_ <|[Y � } Y[_aZ��gf)ZguA� LbBfjY[_5WZ��gf(� ]`_ ���v0Zcv0Y[]`uA�&(U��LY�� ��Zgu�b0f�� �L|ev;Y[u\Y�_ Lb0]�dgf����f�b � ]gbB_aZgu�� f�� � ]gb;_a]���fj| � �MY[v �I�$<Zcb �Ef��0v0ZcvEf�$<Z�� f��&�S^]`_�f�v0Y[_�f��Av �LY��z]�Lv0Ye]`u._aZj}I�B|e]/� ��]/��u\v ��f �f�b � ]gb9_aZguA� f�� ��f���Z��A�0f�v ��f�� ]`_ ���v0Zcv0Y[]`u]��Gb0fjZ����LZ��2|ef �Ev0ZcvEf���_aZj} ��f dgf�b0} f0 ��fjuA�BYedgf�& U���fTfjuwd^YebB]`uL_�fjuwv)d�ZcbBY�Z��<|ef �: �%5A>`��8

���6�>g�2� � Y��

�Ef�v �A�LbBY[u.�5v ��f f0 Vf����v0Ye]`u ]�� v �LY �"� ]`_a_aZguA� &C ]`_a_aZgu��! � � �.$ ������+ ) �*�#� � $ � $ �� � � �Z�� � � ��� � ��� � � � 7 ��� ��� ��� �=� � �97(� � ��� ��� ��� � :

4 ��� 7 ������ � 6���� ��� � � ������� ��� �+������� ��� � � �=� � �97(� � ��� ��� ��� �

�V�2���V���.6�>V� � > '; 6

����A>g�.6L� � � � � � � ���o bBY�u v � v �Lf\u%�<_ ��f�b,]���b0fjZ�� �LZ��<|efI�0v0ZcvEf�� ]���v ��f2�`Y[dgfju _�]���fj| &aP u dgf�b��"]D�0f\_�]���fgk Lb9Y[u v � Zg| �E]v ��f |[Y �Ev�]��GZg|�|�b0fjZ����LZ��2|ef �Ev0ZcvEf��&;U���fTb0fjZ�� �LZ��<|ef �0v0ZcvEf���Zcb0f � ]`_ ���vEf�� Y�� u�f�f���f�� &

C ]`_a_aZgu��+ ) ��+�� $ ��� � � !�� �/����� ��� � ��������Z� �"� �� ���0�����"� �� ��� � � ��� ����� ��� �� � 6L� <��^�A>��6� � � � � � � � � � :�:c���D�^��� � L� ;%6 �

C ��f�������Y �Fv ��f vEbBZguA�BYev0Ye]`u�b0fj|[Zcv0Y[]`u Y���vE]gv0Zg| &&P ��v �Lf vEbBZguA�0Y[v0Ye]`u b0fj|[Zcv0Y[]`u Y��au�]gv\vE]gv0Zg|Mv ��fjuKZ�]gvEfju v0Y[Zg| ��fjZ��L|e]�� � �Ev0ZcvEf Y ��� ��]*�Mu ]D��v&C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� � oAY �f���v ��f ]D�Lv$���v"�gfju�f�bBZcvEf����w}�v ��f(� ]`_a_\ZguA� vE]�v ��f(<b0]��gbBZg_ �$�f���YA=<f����^}�v ��f

�UCUEIRgH � ��fj|[|�dcZcbBY[Z��<|[fTY�� ��f>=<uLf��6k�fj|��Ef v ��bB]D�.�D� v ��f(J�<MPji � ]`_a_aZguA� + _�]gbBf�+=&� : :g���D�^�V� � L� ; 6�rbBYevEf��Mv ��f,]D��v$��Lv"�gfju�f�bBZcvEf�� �^}�v ��f � ]`_a_aZgu�� vE]av ��f)=2|ef(:c���D�^��� � L� ;%6A&i�v v ��f���f�`Y[u<uLY[u.��b0fjZ����LZ��2|ef��Ev0ZcvEf��;Zcb0f�� ]`_ ���vEf��\Y[u ]gb���f�b vE](�D�<ZcbBZgu vEf�fMv �LZcv ��fjZ��L|[]����)�Ev0ZcvEf��Zcb0f Z�� v �LZg|�|e}.bBfjZ����LZ��<|[f�&

Page 41: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} lNO

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef+ ) ��+�� $ ��� � C ]`uwvEb0]`|��(v ��f4Z�� v0Y[d�Zcv0Ye]`u\]��2v �Lf)vE]gv0Zg|[Yev } � ��f�� ��]��"v ��f)vEbBZguA�BYev0Ye]`u5b0fj|[Zcv0Y[]`u �A��bBY[uA��v ��f ���.:��D6L�^�

��':%8�6�;2��Zg|[| & op]D� �0Y �2|ef d�Zg| ��f��)Zcb0f &\]gb�" & /Ff� Z��L|[v)d�Zg|��Lf,Y�� &�&C ]`_a_aZgu��+ ) ��+�� ! ��+ � � ������� � � � ������k! ��� � �-6 �0�8� � �/���g� �� �� � 6L� <

�� ��6�� � � � ��� � � � � :�:g�V� �^�V� � <� ; 6�� � � �\�^� � �6`� � � � +��c�.; � 6��D�V� � D=� �D:c���.6��w��� +��

opf�b � ]gb9_2���sZgYeb C U+* _�]��Lfj| ����f����^Y�u.�.&i ���A; � 6������FvE] ��f � ��f�� �gf�� ��Zgu ��f �$�f���YA=Lf��,Zcv0� ]`_a_aZgu�� |[Y�u�f �A�0Y[uA�)]�Lv0Ye]`u � � &FiF|evEf�bBuLZcv0Y[dgfj|e}gk]�Lv0Ye]`u � � ��Zgu)��f �A�Ef�� � ]gb0���Lf�� �VY[u.�TZ <ZcbBv0Y���L|[Zcb � ]gbB_)�L|[Z4Y�u,v ��f Lb0]��f�b0v }(�<Zcv0Z��<Z��Ef�&pPH�Lu�fjY[v ��f�b� � u�]gb � � Zcb0f �A�Ef��OkVZg|�|6v ��f SVoz~ C � ]gbB_ �<|[Z��4Y[u v ��f �LZcv0Z��<Z��Ef ZcbBf ����f����gf�� &C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� � oAY �f��Mv ��f,]D��v$��Lv �gfju�f�bBZcvEf�� �^} v ��f � ]`_a_\ZguA� Y�u Lb0]�� f�� �0Y[uA��� �UR��%�4vE].v ��f <b0]cW

�gbBZg_ �$�f���YA=Lf�� �^} v ��f �JCIEIRIH�� �Lfj|[|(dcZcbBY[Z��<|efaY�� ��f>=2u�f��6ktfj| �Ef\v ��bB]D�.�D�rv ��f Y��TD �� ]`_a_aZguA� + _a]gb0f�+=&

� : :g���D�^�V� � L� ; 6�rbBYevEf��Fv ��f ]D��v$���v �gfju�f�bBZcvEf�� �w} v �Lf � ]`_a_aZgu�� Y[u Lb0]�� f�� �0Y[u.� � �UR��%�4vE]�v ��f =<|ef:c��� �w��� � <�D;%6A&

� � +��c�.; � 6��D�V� � D � �D:c����6��w��� +i C U\* � ]gbB_)�L|[Z.vE] ��f)� ��f�� �gf�� &.�D:c����6��w� Y��Mv �Lf5_a]��A�<|ef Y[u��Ev0ZguA� f5uLZg_�f3� �LY�� �v ��f,dcZcbBY[Z��<|[f��)Y[u ���A; � 6������\_)�A�Ev���fTf�dcZg|��LZcvEf�� Y�u &

� � �^� � �6`�C ��f������Mv ��f C U+* Lb0]��f�b0v } �MYev � Y�uA��f0 a�^� � �6`�.Y[u v ��f LbB]�"f�bBv } �LZcv0Z��<Z��Ef�&

PH� v ��f(> <�:g�'; �

���6�>g�2� � fjuwd^YebB]`uL_�fjuwvzdcZcbBY[Z��<|[f �LZ�� ��f�fju �Ef�v�k�ZguA��v ��f �Ef�v�]��tb0fjZ�� �LZ��<|ef �Ev0ZcvEf��

�LZ�� �"f�fju Zg|eb0fjZ���} � ]`_2���vEf��6kpv ��fju Z��$�f���Y[Zg|[Y ��f�� Zg| �g]gbBYev �<_:vE]�����f���� i � � ]gbB_)�L|[Z�� Y�� ���Ef��Y[uA�EvEfjZ�� ]��pv �Lf(�Ev0ZguA�LZcb�� _�]��Lfj| ����f����^Y[uA�\Zg| �g]gbBYev �<_2�&

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef��� � � � - �� �*�,+ )~AuLZ��2|ef��Mv �Lf)�A�0f ]�� Zgu Z��4�L]�� Zg| �g]gbBYev �<_ � ]gb � ��f�� �VY[u.� i � � ]gb9_ �L|�Z��&�U��Lf Zg| �g]gbBY[v �L_ k��`Y[dgfjuZ � ]gb9_ �L|�Z.]��zv ��f � ]gbB_���� � , � � � k0� ]`_ ��LvEf��Tv ��f2�Ef�vT]�� �0v0ZcvEf��(�0Zcv0Y��$� }VY[u.� � , � � � kGZguA� ����f������� ��f�v ��f�baY[v)� ]`uwv0ZgY[uA�5v ��f b0fjZ�� �LZ��<|ef �0v0ZcvEf��aY�� v ��f fj_ Lv{} �Ef�v& PH��v �LY��5Y�� v ��f ��Z��EfgkAv �Lfju�v ��fLb0]��f�b0v{}�Y��4dgf�bBYA=Lf��6kVfj|��0f Z � ]D�LuwvEf�b0f0 VZg_2<|ef Y�� <bBY[uwvEf�� &

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef� ��� 1 �*� � ����*� + )~AuLZ��2|ef��Gv ��f�� ]`_ ��Lv0Zcv0Ye]`u5]��2v �Lf)b0fjZ����LZ��2|ef"�Ev0ZcvEf�� �A�LbBY[u.�Fv ��f �V�.:L��6<�w���':%8�6�; � ]`_a_aZguA�\ZguA�

� ��fju*�A�Ef���Y[uI� ]`u��$�Lu�� v0Ye]`uf�MY[v �av ��f(> <�:c�'; �

���6�>g�2� � fjuwd^YebB]`uL_�fjuwvAdcZcbBY[Z��<|efMfjuLZ��<|ef��zv ��f ���Ef]��(Zgu Z�����]�� Zg| �g]gbBY[v �L_ vE]adgf�bBY � } Y[u dcZcbBY[Zguwv �&

C ]`_a_aZgu��+ ) ��+�� � � ���*� � � ������� ��� � � � 6��0�8� � �/���g��� ���8� �4����Z� �� � �� � 6L� <������.>`� � � � � � � � � � :�:c���D�^��� � L� ;%6 � � � ���^�`��A6 � � � � +��=���.>`� � 6������ � D ���:g����6�� ��� +��

opf�b � ]gb9_2�)Y[uwd�ZcbBY�Zgu v ����f����^Y�u.�5]`u v ��f �`Yedgfju _�]���fj| &!i�u Y[uwdcZcbBY[Zguwv;Y���Z �Ef�v�]�� �0v0ZcvEf��& C ��f����^Y�u.�v ��fzY�u dcZcbBY[ZguwvOY��6v ��f Lb0]�� f�� �O]��.��f�vEf�bB_\Y[uLY[u.��v �LZcvpZg|[|D�Ev0ZcvEf�� b0fjZ�� �LZ��<|ef � b0]`_ v ��fAY[uLY[v0Y[Zg|��Ev0ZcvEf��p|[YefY[u�v ��f�Y[u dcZcbBY[Zguwv&pPRuwd�Zcb9Y[Zgu v � vE] ��f)dgf�bBYA=Lf��I��Zgu2��f"Lb0]�d^Y��Lf���Z�� �0Y[_2<|ef � ]gb9_ �L|�Z��Mq �MYev ��]D�Lv Zgu }vEfj_ �]gbBZg|6]��f�bBZcvE]gb�� x�Y[u v ��f Y�u.���v�=<|efTdVY[Z�v ��f�D=���UCgHA���UR�� �gf�}g�;]gb�� ]gb��LYeb0f�� v0|e}�Zcv � ]`_a_aZgu��|[Y[u�fgk.�A�BY[u.�5v ��f,]�Lv0Y[]`u � � &j�Lv0Ye]`u � � ��Zgu ��f �A�Ef�� � ]gb � ��f�� �VY[u.��Z <Zcb0v0Y���<|[Zcb4Y[uwd�ZcbBY�Zgu v�]��Gv ��f _�]���fj| &(P �Gu�fjYev ��f�b � � uL]gb� � Zcb0f ���Ef��6kLZg|[|�v ��f Y[u dcZcbBY[Zguwv �)Zcb0f � ��f�� �gf�� &/ ��bBY[u.������f����^Y�u.� ]�� Y[u dcZcbBY[Zguwv.Zg|�|Mv ��f �sZgYebBu�f�� ��� ]`uA�LYev0Y[]`uA�\Z�� �0]���Y[ZcvEf�� ��Yev � v ��f _�]���fj|FZcb0fY �`u�]gb0f�� &

Page 42: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} lgi

PH�zZgu Y�u dcZcbBY[Zguwv ��]^f��Tu�]gv ��]`|��6k"Z�<b0]w]��(]�� � ZgY[| ��b0f Y�����fj_�]`u��EvEbBZcvEf�� & U��LY � � ]`uA�0Y �Ev �F]��AZI2Zcv ��Ev0Zcb0v0Y[uA� � b0]`_ Zgu�Y[uLY[v0Y[Zg| �Ev0ZcvEf vE] Z��Ev0ZcvEf |e}^Y�u.� ]D��v �BY���f�v ��f Y[u dcZcbBY[Zguwv& U��LY � 2Zcv ���<Z��5v ��fLb0]��f�b0v{}.v �LZcv�Yev4Y���v ��f ����]gb0vEf��Ev�2Zcv � |efjZ��LY[uA� vE].Z2�Ev0ZcvEf ]D�Lv �0Y���fTv ��f Y�u dcZcbBY[Zguwv&C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� � oAY �f��Mv ��f ]D��v$'��v �gfju�f�b9ZcvEf��4�^} v ��f)Lb0]��gbBZg_ Y[u <b0]�� f����0Y[u.��D=���UCgHA���UR��%�)vE]�v ��f

Lb0]��gbBZg_ �$�f���YA=Lf��(�w}Tv ��f �UCUEgRIH � ��fj|[|gdcZcbBY[Z��2|ef Y �.��f>=<u�f��Ok=fj|��Efzv ��b0]D�.�D� v ��f J�<�P\i� ]`_a_aZguA� + _a]gb0f�+=&

� : :g���D�^�V� � L� ; 6�rbBYevEf���v �Lf�]D�Lv$���v)�gfju�f�bBZcvEf�� �^} v ��f � ]`_a_aZgu�� Y[u�Lb0]�� f�� �0Y[u.� D ���JCNH�� �UR � � vE]v ��f)=<|[f :c���D�^��� � L� ;%6A&� � +����V�A>g� � 6��D�V��� D � �D:c���.6��w��� +U���f � ]`_a_aZguA� |[Y�u�f �$�f���YA=Lf�� Y[uwd�ZcbBY�Zgu v�� ]gb9_ �L|�ZavE] ��f dgf�bBYA=<f�� & �D:g�V�.6��w� Y���v ��f_�]��A�L|ef,Y[u��Ev0ZguA� f uLZg_af'� �LY ��� v ��f d�ZcbBY�Z��<|ef��4Y[ur�=���.>`� � 6������._)�A�Ev �"f f�d�Zg|��<ZcvEf��Y[u &

C ]`_a_aZgu��+ ) ��+�� � $ � ! ��+ � � ������� ��� � ����� � � 6��0�8� � �/� � � �� � 6L� <�;`�A;�� �A6L� � � � � � � � � � :*:c��� �w��� � <�D;%6 � � � �\�^�`��A6 � � � ��+ ;g�A; � 6������ � D ���:g����6�� ��� +��

opf�b � ]gb9_2��_�]��Lfj|'� ��f�� �VY[u.� ]��m*VU+*�� ]gbB_ �<|[Z��&!*VU+* _�]��Lfj|'� ��f�� �VY[u.��Y��zb0f��A�A� f��.vE] C U+* _�]���fj|����f����^Y�u.�.Z����Lf�� � bBY ��f�� Y[u v ��f 2Z�"f�b"�^}�l C �+P FNO/mB&i ;g�A; � 6������FvE] ��f � ��f�� �gf�� ��Zgu ��f �$�f���YA=Lf��,Zcv0� ]`_a_aZgu�� |[Y�u�f �A�0Y[uA�)]�Lv0Ye]`u � � &FiF|evEf�bBuLZcv0Y[dgfj|e}gk]�Lv0Ye]`u � � ��Zgu)��f �A�Ef�� � ]gb0���Lf�� �VY[u.�TZ <ZcbBv0Y���L|[Zcb � ]gbB_)�L|[Z4Y�u,v ��f Lb0]��f�b0v }(�<Zcv0Z��<Z��Ef�&pPH�Lu�fjY[v ��f�b� � u�]gb � � Zcb0f �A�Ef��OkVZg|�|6v ��f)*VU+*pS�oA~ C � ]gbB_)�L|[Z��4Y�u v ��f(�LZcv0Z��<Z��Ef Zcb0f(���Lf�� �gf�� &C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� � oAY �f�� v �Lf\]D��v$��Lv(�gfju�f�bBZcvEf�� �w} v ��f�� ]`_a_aZguA� Y[u LbB]�� f�� �BY[u.� ZUGIZA� �UR � �TvE] v ��f

Lb0]��gbBZg_ �$�f���YA=Lf��)�^} v �Lf �UCUEgRIH � ��fj|[|^dcZcbBY[Z��<|ef)Y �?��f>=<uLf��6kgfj|��Ef4v �Lb0]D�.�D�5v ��f JFuLY � ]`_a_aZguA� + _a]gb0f�+=&

� : :g���D�^�V� � L� ; 6�rbBYevEf��Fv ��f ]D��v$���v �gfju�f�bBZcvEf�� �^} v ��f � ]`_a_aZguA� Y[u <b0]�� f����0Y[u.� ZUGUZ.���IR �%�4vE]�v ��f=<|ef :g�V� �^�V� � <� ; 6�&

� � + ;`�.; � 6��D�V� � D � �D:c����6��w��� +i�u *VU+* � ]gbB_)�L|[Z�vE]���f(����f����gf�� & �D:c����6��w�.Y��)v �Lf _�]��A�L|ef,Y[u��Ev0ZguA� f uLZg_af�� �LY�� �v ��f,dcZcbBY[Z��<|[f��)Y[u�;g�A;

�6������\_)�A�Ev���fTf�dcZg|��LZcvEf�� Y�u &

� � �^� � �6`�C ��f������Mv ��f.*VU+* <b0]��f�b0v } �MYev � Y[uA�Lf0 a�^�`��A6 �.Y�u v ��f(Lb0]��f�b0v{}��LZcv0Z��2Z��Ef�&

C ]`_a_aZgu��+9�� !#"%$ � � � ������� � � �+����� � ��� ���"� ������ � � �� �"� � ���"�14 � � � �����=� � ���Z� ���"� �����:��.�w����6 � � � � � � � � � :I:g���D�^�V� � L� ; 6�� � � ���w� ��A6 � � � ��+��D:����^�V�.6 � 6������ � D ���:g����6�� ��� +��U��LY���� ]`_a_aZguA� ��fjZg|�� �MYev � v ��f � ]`_2���v0Zcv0Ye]`uK]���1%�<Zgu v0Yev0Zcv0Y[dgf � �LZcbBZ�� vEf�bBY��0v0Y����]�� b0fjZg|Mv0Y�_�f�E}��EvEfj_2�&�PRv Y�� Z��<|[f�vE] � ]`_ ���vEfav �Lfa|efju.�gv �r]��;v ��f2� ��]gbBvEf��Ev.qs|e]`u.�gf��0v9x�<Zcv � � b0]`_ v[�;]��`Y[dgfju�Ef�v4]�� �Ev0ZcvEf��&

� C���� >�;�� � >(��A6 �A> �

� D � � >�;�� � >(��A6 �A> �o b0]��f�b0v0Y[f��T]��Av ��faZ���]=dgfI� ]gbB_ ��Zgu ��f �$�f���YA=Lf�� Y[u v ��f�Y[uA���v�=<|ef d^Y[Z�v ��f �gf�}g�;]gb�� �JW����NY GUR]gb �LY[b0f�� v0|e}.Zcv � ]`_a_aZguA� |�Y[u�fgk.�A�0Y[uA� ]�<v0Ye]`u � �?&

Page 43: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} l�F

j�Lv0Ye]`u � ����Zgu4��f �A�Ef���� ]gb�� ]`_ ���v0Y[uA�\Z2<ZcbBv0Y���L|[Zcb4f0 �Lb0f����0Ye]`u Y�u v ��f _a]���fj|B&;P �(u�fjYev ��f�b � �u�]gb � � ZcbBf �A�Ef��6kLZg|�|�v ��f C j - o JFU4~ � "f���Y[=���Zcv0Ye]`uA�)Zcb0f � ]`_ ���vEf�� &C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� � oAY �f�� v �Lf\]D��v$��Lv(�gfju�f�bBZcvEf�� �w} v ��f�� ]`_a_aZguA� Y[u LbB]�� f�� �BY[u.� �JW����NY GUR��TvE] v ��f

Lb0]��gbBZg_ �$�f���YA=Lf��(�w}Tv ��f �UCUEgRIH � ��fj|[|gdcZcbBY[Z��2|ef Y �.��f>=<u�f��Ok=fj|��Efzv ��b0]D�.�D� v ��f J�<�P\i� ]`_a_aZguA� + _a]gb0f�+=&

� : :g���D�^�V� � L� ; 6�rbBYevEf��Fv ��f ]D��v$���v �gfju�f�bBZcvEf�� �^} v ��f � ]`_a_aZguA� Y[u <b0]�� f����0Y[u.� �JW����gYJGUR��4vE]�v ��f=<|ef :g�V� �^�V� � <� ; 6�&

� � +��D:��.�w���.6 � 6��D����� D � �D:c���.6��w��� +i C j - o JFU4~ � ]gbB_)�L|[ZavE]���f � ��f�� �gf�� &,��:g�V�.6�� � Y��4v �Lf _�]��A�L|ef,Y�uA�Ev0ZguA� f u<Zg_�f� �LY�� � v ��f dcZcbBY[Z��<|[f��)Y[u ��:��.�w����6 � 6��D�V�a_)�A�Ev �"fTf�dcZg|��LZcvEf�� Y[u &

� � �^� � �6`�C ]`_ ��LvEf��)]`uL|e}�v ��f Lb0]��f�b0v{} ��Yev � Y[uA��f0 \�w� ��A6 �

C ]`_a_aZgu������� ! ��� ! � � $ - � 6 6 � � � ��� � ��� ��� � � ��� �+�2� ��� ��� � ��� � ��� �"� ���>D8�8

�����:���6`�^����� � � ����� � � � � ; � � � � � ��� � � + �: �c���';%> � D=� �D:c����6��w��� +��

i ���A�.Z�LbB]�"f�bBv } Y[uKv ��f |[Y��Eva]�� Lb0]��f�b0v0Yef���& PRv�Y����]D� �0Y �2|ef vE] Y[uA�Ef�b0v�*VU+* k C U+*AkAP <MX#i�QZguA� 1%�<Zgu v0Yev0Zcv0Y[dgf\q C j - o JFU4~;x Lb0]��f�b0v0Yef���&p~Adgf�b0}.u�f9��|e}aY[uA�Ef�bBvEf���<b0]��f�b0v }aY���Y[u<Yev0Y[Zg|[Y���f��avE]�LuA� ��f�� �gf�� &�iDv }�"f ]�<v0Ye]`u _)�A�Ev"��f �`Yedgfju vE]�Lb0]��f�bB|e}af0 Vf����vEf,v �Lf � ]`_a_aZguA� &C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� �

i ���A�4Z C U\* Lb0]��f�b0v{}�&� ;

i ���A�4Zgu�*VU+* Lb0]��f�b0v }�&� �

i ���A�4Zgu P <MX#iFQ LbB]�"f�bBv }�&� �

i ���A�4Zf1��LZguwv0Yev0Zcv0Yedgf.q C j(- o J�U4~�x Lb0]��f�b0v{}�&� � + �:`�g�V�';�> � D=� ��:g�V�.6�� ��� +

i ���A�)v ��f �:`�g����;�> �$�f���YA=<f��.]`u v ��f(� ]`_a_aZgu��VW |[Y[u�f�&��:g����6�� � Y��(v ��fF_�]��A�L|ef)Y[uA�0v0ZguA� fMuLZg_�f � �LY�� �5v ��f4dcZcbBY[Z��<|ef��AY[u �:`�g�V�';�> _)�A�Ev ��ff�d�Zg| �LZcvEf�� Y[u &] � 1 # �F8?8:%435*�1 �j��� p ��@�35*�� * H �,*��A/r# l5� I�� 7B3&^

P u v �LY��0�Ef�� v0Ye]`u3�;f"��f�� � bBY ��f;Y[u �Lf�v0ZgY[|^v ��f"� ]`_a_aZguA�A�0� ]gb ��]`Y[u.�TZguA� � ]`uwvEb0]`|[|[Y[uA��/;]D�LuA�Lf�� - ]���fj|C ��f����^Y[uA�aY[u �`�'����� &

/;]D�LuA�Lf��2- ]���fj| C ��f����^Y[uA�TY �0�<Z��Ef��5]`u5v ��f�b0f��A��� v0Ye]`u ]��2v ��f ��]D�LuA�Lf�� _�]���fj|����Lf�� �VY[u.�(LbB]��<|efj_vE]�Z2Lb0]��]D�0Yev0Ye]`u<Zg| �0Zcv0Y�� =<Z��2Y[|[Yev{}ILb0]��2|efj_ &�i � vEf�b�v ��f Lb0]��<|efj_ Y����gfju�f�b9ZcvEf��6k'� �'�����.Y[uwvEf�bBuLZg|�|e}*��Zg|�|��Z Lb0]��]D�0Y[v0Ye]`uLZg|LSJi(U �E]`|[dgf�bAY[u5]gb���f�bAvE])=<uA��Zgu.Z�� �0Y �`uL_afju v � �<Y���� �0Zcv0Y � =Lf��(v ��f"<b0]��<|efj_ & C ��bBb0fju v0|[}�`�'����� � �.A2|[Yef�� v[�;]�SJi(U �E]`|edgf�b���� S^P7- ZguA��� ���LZ�:0& <�]gv0Y�� f v �LZcv��?���LZ�: Y��2� ]gb\uL]`uVW � ]`_a_�f�b���Y�Zg|���b �]D�Ef��M]`uL|e}gk"ZguA� Y��Mv ��f�b0f� ]gb0f5u�]gv�Y[u���|��A��f�� Y[u v ��f �0]D��b�� f � ]���f)�LY��EvEbBY�����v0Ye]`u6k�Z�� �;fj|[|tZ��FY[u��0]`_�f]��4v ��f*�<Y[uLZcbB}��<Y��EvEbBY �'��v0Ye]`uA�F]���� �������'& PRv Y � Zg|��0]��]D� �0Y �2|ef�vE]��gfju�f�bBZcvEf v ��f��BZcv0Y�� =<Z��<Y�|[Yev }�LbB]��<|efj_�MYev ��]D�Lv ��Zg|[|[Y�u.�av ��f�SJi(U �0]`|edgf�b�&M~zZ���� �gfju�f�bBZcvEf�� Lb0]��2|efj_ Y�� �A�L_ �f�� Y�u�/FP7- i C S�� ]gbB_aZcv�Y�u vE] Z=<|ef�& /FP7- i C S5Y �(v ��f��Ev0ZguA�<Zcb�� � ]gbB_aZcv �A�Ef��\Z�� Y[u.��Lv3�^}5_�]D�Ev f0 VvEf�bBuLZg|2S i(U �E]`|edgf�bjk��E],Yev Y��0�]D� �BY �<|efvE]��A�0f �`�'����� ��Yev � Zgu f0 VvEf�bBuLZg| SJi(U �E]`|edgf�b �0f<ZcbBZcvEfj|e}�&

Page 44: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} ,`m

C ]`_a_aZgu���#� + �� $�"�! � 4 �(��� 6 � ��� ��� � 6��0� � �;4 ����� � �� � � ����� �Z� �� ��� ��� ��� �`�O�

���6`� ��� � � � �

� ]D� _)�A�Ev ��Zg|[|pv �LY�� � ]`_a_aZgu��4��f� ]gb0f �A�Ef5Zgu } ]gv ��f�b(�<_I� W b0fj|[ZcvEf���� ]`_a_aZguA� &fjTuL|e} ]`uLf2��Zg|[|�f�b �Ef�� �0Y[]`u Y��)b0f 1��LYeb0f�� &

C ]`_a_aZgu����� �#� + � : D� �"�����2� > ��� ��� � � ����� � � � � � ��� � 4� ! 4 ���Z� � �����"� ��*�<�:

�`�O� � � � �U��LY�� � ]`_\_aZguA� Y[u<Yev0Y[Zg|[Y���f�� v ��f��0}��EvEfj_ � ]gbadgf�b9YA=���Zcv0Ye]`u & PRvaY��5f 1��LYedcZg|efjuwv�vE] v ��f � ]`_a_aZgu��

�Ef 1���fjuA� f5��6�> 8��':%8�6�;Lk .;%>`�w�.6g�

�� �D6 �.>`�<� � �2kA6g�"�D: 8�6

��A>g�2� >�'; 6<�^k�^���D; 8

��:%:�; 6�>c�

��':%8�6�;Lk

`�O����6`� ���?&pPH� �0]`_�f�� ]`_\_aZguA�A� �LZjdgf Zg|ebBfjZ���} ��f�fju\f0 Vf����vEf��6kVv ��fju�]`uL|e}5v ��fFb0fj_aZgY�uLY[u.�,]`uLf��

�MY[|[| ��f,Y[uwdg]��gf�� &C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� �

o bBY�u v �)v �Lf(� ]`_a_aZguA� ���0Z��gf�&C ]`_a_aZgu��+ ) ��+�� � $ � ! ��+ ��� + � !�� �/����� ��� � � � 4 �� ����� � � �/�Z� � �����"� ��

�� � ����� �����

� � �/�Z� � �����"� ������ � � ��� ��� �(���3��� � � 4 ��*�X!�� �/� � � � � ����� � ��� ����� ����� ��� ��� ���o� � � �^� ��� ����� 6 ��� �b� � � � 7��=� ��4���� � ���� � 6L� <�;`�A;�� �A6L�

� �6� � � � � � � ��8 � � � ��+ �: �g�V�';%> + � D � ��:g����6�� ����� � � <5�?>�� � ; 6g�D< � � �� � ;*; :�:�� '>V�=<�� � � : <�D;%6g��>��'6��U��LY�� � ]`_a_aZguA���gfju�f�bBZcvEf���]`u�f,]gbT_�]gb0f(LbB]��<|efj_2��kLZgu�� ��Zg|[|���S i(U �E]`|edgf�b � ]gb�fjZ���� ]`u�f�&�~AZ����

Lb0]��<|[fj_�Y��Ab0fj|[ZcvEf���vE]5Z �$�f���YA='��Lb0]��2|efj_ ��]D�LuA�Ok � �LY�� �.Y�uA� b0fjZ��Ef�� � bB]`_ ��f�b0] qsm xAvE] v ��f �`Y[dgfju_aZ� �Y[_ �<_ Lb0]��<|efj_ |efjuA�gv � &8P�f�b0f +?,�� ������3+)Y��pv ��f"��]D�LuA� ]��2v ��f"<b0]��<|efj_Dv �LZcv �E}��EvEfj_�Y��0�g]`Y�u.�vE]I�gfju�f�b9ZcvEf ZguA� ��]gb��E]`|edgf�&PRu v �LY���� ]`uwvEf0 ^v�v ��f,_aZ� �Y[_)�L_ Lb0]��2|efj_ ��]D�LuA� Y���b0fLbBf��Efju vEf����w}�v ��f ����� ]`_a_\ZguA� <Zcb9Zg_�f WvEf�bjkL]gb �w} Yev ����f�sZ��L|ev�dcZg|���f(�EvE]gbBf�� Y[u v ��f fjuwdVYeb0]`uL_�fjuwv)dcZcbBY[Z��<|ef �\* ,�� ������ &U���f)�0Y[u.�`|ef �gfju�f�bBZcvEf�� Lb0]��<|[fj_ Zg|��E]*��f�fjuA�A�4]`u v ��f�+j, ( ( � � � �� + <Zcb9Zg_�f�vEf�b�}g]D����Zgu f0 �2|[Y�� WYev0|e} �$�f���Y � }��w} v ��f �$,)]�Lv0Ye]`uOkp]gb �^} Yev �)��f�sZ��L|ev dcZg|���f*�EvE]gb0f���Y[u v ��f�fju dVYeb0]`uL_afju v d�ZcbBY�Z��<|ef�B*� , ( ( � � � ��=&U���f Lb0]��f�b0v{},vE] ��f � ��f�� �gf��._aZj} �"f �$�f���YA=Lf��)�A�0Y�u.��v �Lf � � � & �\]gbpv �Lf � ��+ \( �W* � , � +z]�<v0Ye]`uA�&PH�;}g]D�ru�f�f��rvE] �gfjuLf�bBZcvEf\Z �LY[_\Z�������L_ �=<|ef5]��zZg|�|0�gfju�f�bBZcvEf�� LbB]��<|efj_2��k�}g]D� _)�A�Ev(���Ef5v ��f]�Lv0Ye]`u �Y(�+ 5,�� � � * �=+�&

C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� � � �'& ���

� ��& ���5Y��Ov ��fAu��L_�f�bBY��GY[u���f0 F]���Z)dcZg|[Y��8*VU+**�$�f���YA=���Zcv0Y[]`u � ]gbB_)�L|[Z)Z�� v �<Zg|[|e} |e]���ZcvEf��Y[u v ��f <b0]��f�b0v0Yef��"�LZcv0Z��<Z��0f�&

� � + �:`�g�V�';�>?+ � D � �D:c����6��w���C ��f������Mv ��f �:`�g�V�';�> �$�f���YA=Lf�� ]`u v �Lf � ]`_a_aZguA��W |[Y[u�f�&��:g����6�� � Y��(v ��fF_�]��A�L|ef)Y[uA�0v0ZguA� fMuLZg_�f � �LY�� �5v ��f4dcZcbBY[Z��<|ef��AY[u �:`�g�V�';�> _)�A�Ev ��ff�d�Zg| �LZcvEf�� Y[u &

� < * � � ,�� ������* � � , ����� �� Y��Tv ��fa_aZ� �Y[_)�L_ Lb0]��<|[fj_ ��]D�Lu�� _)�A�Ev ��f�b0fjZ�� ��f�� & jTu<|e} uLZcv �LbBZg|u%�<_ ��f�b�ZcbBf dcZg|[Y�� dcZg|���f�� � ]gbFv �LY��M]�Lv0Ye]`u &�P � u�]adcZg|���f Y ���`Yedgfju v ��f fjuwd^Y[b0]`uL_�fjuwvd�Zcb9Y[Z��<|ef��\* , �������� Y��"� ]`uA�0Y ��f�b0f�� Y[u��EvEfjZ�� &

� ; , ( ( � � � ��, (�( � � � �� dcZg|���f,_aZ=}*��fg�W�Z�uLZcv ��b9Zg|tu��L_ ��f�bFY[u qsmVk * � � , ����� �� ���"x &Fo ]D�BYev0Yedgf �0Y �`u q � ,� x ��Zgu4��f Zg|��E]����Ef��Z�� Lb0f>= .]��tv ��f u��L_ ��f�b�&#iFu }�Y[u dcZg|[Y���� ]`_ �2Y[uLZcv0Ye]`u�]�� |[fju.�gv � ZguA� |e]w]���<Z�� � �MY[|[|��f(�$�^Y�A�f��*����bBY[u.� v ��f(�gfjuLf�bBZcv0Ye]`u �=�E]`|[d^Y[uA� Lb0]�� f�� �&

Page 45: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} ,Lh

WGZ u�f�`Zcv0Yedgf u��L_ �"f�b;Y[u q WBhckVW��\*� ,�� ������<x &(P u\v �LY � ��Z��Ef3, ( ( � � � �� Y�� � ]`uA�BY���f�b0f���Zd�Zg| ��f�bBfj|[Zcv0YedgfFvE] * � � ,�� ������%&7i�uw}\Y[uwd�Zg|�Y��I� ]`_ �<Y[uLZcv0Y[]`u.]�� |efju.�gv ��ZguA� |e]w]���<Z�� ��MY[|[| ��f(�$�VY A�f�� �A��bBY�u.� v �Lf �gfju�f�bBZcv0Ye]`u �=�0]`|ed^Y�u.� Lb0]�� f�� �&WAv ��f �0}^_ ��]`| � i �ekD� �LY���� _afjZguA� +�u�]a|e]^]�A�<Z�� � +WAv ��f �0}^_ ��]`| �����ekD� �LY�� � _�fjZguA�2+ Zg|[|?�]D� �BY �<|efT|e]^]�A�<Z�� �*� b0]`_ ��f�b0]avE] ,�� ������ ��� +

� : 5,�� � � * �|, ��� � * ��Y ��v ��fAuLZg_�f(]��Vv ��f ���L_ �f�� �LY[_aZ���h=2|ef�&OPRvt_aZj} � ]`uwv0ZgY[u(�$�f���Y[Zg|��0}^_ ��]`|��� �LY�� � �MY[|�|0�"f._aZ�� b0]cW f0 �<ZguA��f�� vE]�� ]gbB_:v ��f\b0fjZg|7=<|[fauLZg_�f�& o ]D���0Y �<|ef2�0}^_ ��]`|��Zcb0fg�W;�I?z�2_�]��Lfj|6uLZg_�fb�MYev � 2Zcv � <Zcb0vW;� �{� _�]���fj|6uLZg_af��MYev ��]D�Lv 2Zcv � <Zcb0vW;� �2� ���bBb0fju v Lb0]��<|efj_ ��]D�LuA�W;�w|�� ���b0b0fjuwv4|e]^]�A�<Z����.dcZg|���fW;�wu6� Y[uA��f0 �]�� v �Lf ���b0b0fjuwv0|e}�Lb0]�� f�� �Ef�� � ]gbB_)�L|[Z�Y[u v ��f <b0]��f�b0v0Yef��"�LZcv0Z��<Z��0fW;�^�L�(v ��f � � �A� �LZcbBZ�� vEf�b

C ]`_a_aZgu��+ ) ��+�� � $ � ! ��+ ��� + � � � ! � � !�� �/� ��� ��� � � � 4 �� ��� � � � �/�Z� � �����"� ���� � �����

����� � � �/�Z� � �����"� ������ � � � � ��� � ���3� � � � 4 ��*� !�� �/� � � � � ����� � ��� ����� ����� ��� � ����� � �� ��� 7 � � � 7����� 6 �� 6 ��� �+� � � ��7 �=� ��4���� � ���� � 6L� <�;`�A;�� �A6L�

� �6�

�:c��6�� � � � � � � ��8�� � � ��+ �:`�g�V�';�>?+ � D=� �D:c����6��w����� � � <�; 6g�D< � � �

� � ;*; :�:�� '>V�=<�� � � : <�D;%6g��>��'6��i � � ]`_a_\ZguA� ����f���� |ev0|�� "f�� �<_2� ����vzY[v Lb0]��A�A� f��z]`uL|e}�]`uLf��0Y�u.�`|ef�LbB]��<|efj_ ��Yev � =B ^f�����]D�LuA�ZguA� |e]^]�A�<Z���� d�Zg|��Lf���ko�MYev � u�]aY[vEf�bBZcv0Ye]`u ]��pv ��f(LbB]��<|efj_ ��]D�LuA�*� b0]`_ ��f�b0]avE]._aZ� |efju.�gv � &C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� � � �'& ���

� ��& ���5Y��Ov ��fAu��L_�f�bBY��GY[u���f0 F]���Z)dcZg|[Y��8*VU+**�$�f���YA=���Zcv0Y[]`u � ]gbB_)�L|[Z)Z�� v �<Zg|[|e} |e]���ZcvEf��Y[u v ��f <b0]��f�b0v0Yef��"�LZcv0Z��<Z��0f�&U���f dcZg|[Y��LY[v }\]�� � �'& ��� dcZg|���f,Y�� ����f����gf�� ]D��v �w}�v ��f(�E}��EvEfj_ &

� � + �:`�g�V�';�> � D=� ��:g�V�.6�� ��� +C ��f������Mv ��f �:`�g�V�';�> �$�f���YA=Lf�� ]`u v �Lf � ]`_a_aZguA��W |[Y[u�f�&��:g����6�� � Y��(v ��fF_�]��A�L|ef)Y[uA�0v0ZguA� fMuLZg_�f � �LY�� �5v ��f4dcZcbBY[Z��<|ef��AY[u �:`�g�V�';�> _)�A�Ev ��ff�d�Zg| �LZcvEf�� Y[u &

� < , ��������,�� ������ Y��4v ��f)Lb0]��2|efj_ ��]D�LuA� ���Ef���� ��fju �gfju�f�b9Zcv0Y[u.�\v �Lf �0Y[uA�`|ef(Lb0]��2|efj_ &cjTuL|[}uLZcv ��bBZg| u%�L_ ��f�b Zcb0f dcZg|[Y��&dcZg|���f�� � ]gb v �LY � ]�Lv0Ye]`u & P �5u�] d�Zg| ��f Y�� �`Yedgfju v ��ffju dVYeb0]`u<_�fju v)dcZcbBY[Z��2|ef��B*� , ����� �� Y �"� ]`uA�0Y���f�bBf�� Y[uA�EvEfjZ�� &

� ; , ( ( � � � ��, (�( � � � �� dcZg|���f,_aZ=}*��fg�W�Z�uLZcv ��b9Zg|tu��L_ ��f�bFY[u qsmVk * � � , ����� �� ���"x &Fo ]D�BYev0Yedgf �0Y �`u q � ,� x ��Zgu4��f Zg|��E]����Ef��Z�� Lb0f>= .]��tv ��f u��L_ ��f�b�&#iFu }�Y[u dcZg|[Y���� ]`_ �2Y[uLZcv0Ye]`u�]�� |[fju.�gv � ZguA� |e]w]���<Z�� � �MY[|[|��f(�$�^Y�A�f��*����bBY[u.� v ��f(�gfjuLf�bBZcv0Ye]`u �=�E]`|[d^Y[uA� Lb0]�� f�� �&WGZ u�f�`Zcv0Yedgf u��L_ �"f�b;Y[u q WBhckVW��\*� ,�� ������<x &(P u\v �LY � ��Z��Ef3, ( ( � � � �� Y�� � ]`uA�BY���f�b0f���Zd�Zg| ��f,b0fj|[Zcv0Y[dgf vE] , ����� �� &�iFu } Y[uwdcZg|[Y�� � ]`_ �2Y[uLZcv0Ye]`u ]��(|efjuA�gv � ZguA� |e]^]�A�<Z���� �MY[|[|��f(�$�^Y�A�f��*����bBY[u.� v ��f(�gfjuLf�bBZcv0Ye]`u �=�E]`|[d^Y[uA� Lb0]�� f�� �&WAv ��f �0}^_ ��]`| � i �ekD� �LY���� _afjZguA� +�u�]a|e]^]�A�<Z�� � +WAv ��f �0}^_ ��]`| �����ekD� �LY�� � _�fjZguA�2+ Zg|[|?�]D� �BY �<|efT|e]^]�A�<Z�� �*� b0]`_ ��f�b0]avE] ,�� ������ ��� +

� : 5,�� � � * �|, ��� � * ��Y ��v ��fAuLZg_�f(]��Vv ��f ���L_ �f�� �LY[_aZ���h=2|ef�&OPRvt_aZj} � ]`uwv0ZgY[u(�$�f���Y[Zg|��0}^_ ��]`|��� �LY�� � �MY[|�|0�"f._aZ�� b0]cW f0 �<ZguA��f�� vE]�� ]gbB_:v ��f\b0fjZg|7=<|[fauLZg_�f�& o ]D���0Y �<|ef2�0}^_ ��]`|��Zcb0fg�

Page 46: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} , G

W;�I?z�2_�]��Lfj|6uLZg_�fb�MYev � 2Zcv � <Zcb0vW;� �{� _�]���fj|6uLZg_af��MYev ��]D�Lv 2Zcv � <Zcb0vW;� �2� ���bBb0fju v Lb0]��<|efj_ ��]D�LuA�W;�w|�� ���b0b0fjuwv4|e]^]�A�<Z����.dcZg|���fW;�wu6� Y[uA��f0 �]�� v �Lf ���b0b0fjuwv0|e}�Lb0]�� f�� �Ef�� � ]gbB_)�L|[Z�Y[u v ��f <b0]��f�b0v0Yef��"�LZcv0Z��<Z��0fW;�^�L�(v ��f � � �A� �LZcbBZ�� vEf�bC ]`_a_aZgu����� � � $ � ! ��+ �#� + � � � � � � � � ���� � � � � � ��� 6g� � �=��� �F� ��� ��� � � � 4 �� �����

� � �/�Z� � �����"� ���� � ����� ����� � � �/�Z� � �����"� �������� � � � ��� �(���3� � � � 4 ����X$ �� �������"� ����� 6

6 � � � � � � ����� � ��� ����� ����� ��� �� ��� � � � � 7 ��� 6 �� 6���� � � ��� ��7��=����4 ��� � ���<�6g�

�;`�.;L� �A6L�

� �6� � � � � � � ��8 � � � � + �: �c���';%> + � D � ��:g����6�� ����� � � <��?>�� � ; 6g�D< � � � � � ;; :�:���'>V�=< � � � : L� ; 6g�'>=� 6 �

U��LY���� ]`_a_aZgu��4�gfjuLf�bBZcvEf��T]`u�f ]gbT_a]gb0f Lb0]��<|efj_I��k2ZguA� �A�L_2��MfjZ�� ��Lb0]��<|[fj_ Y[uwvE]�Z �LY�_aZ���=<|ef�& ~zZ�����LbB]��<|efj_ Y��Fb0fj|[ZcvEf�� vE] Z �$�f���YA=�� Lb0]��<|[fj_ ��]D�Lu��6kF� �<Y���� Y[uA� bBfjZ��Ef�� � bB]`_ ��f�bB] qsm xvE]�v ��f �`Yedgfju _aZ� �Y[_)�L_ Lb0]��<|[fj_ ��]D�LuA� & P u v �LY�� � ��]gbBv ��f���� bBY Lv0Ye]`u +?,�� ������3+FY���v �Lf���]D�Lu��\]��v ��f(LbB]��<|efj_ v �LZcv �0}��EvEfj_ Y��"�g]`Y[u.��vE]��A�L_ ]D��v&PRu\v �LY�� � ]`u vEf0 Vvzv �Lf�_aZ� �Y[_)�L_ LbB]��<|efj_ ��]D�LuA��Y � b0fLbBf��Efju vEf��I�w}�v �Lf�* � � , ����� ��2<ZcbBZg_�f�vEf�b=k]gb �^}�Y[v ����f�sZ��L|ev�d�Zg| ��f(�EvE]gb0f�� Y[u v ��f fjuwd^YebB]`uL_�fjuwv)d�ZcbBY�Z��<|ef��B*� , ����� �� &~AZ�� � �A�L_ �f�� <b0]��<|efj_ Zg|��E] ��f�fjuA�A�M]`u v �Lf |e]^]�A�<Z���� }g]D� ��Zgu f0 �2|[Y���Yev0|e} �$�f���Y � } �^} v ��f �{,]�Lv0Ye]`u6k<]gb��w} Yev ���Lf� Z��L|[v)d�Zg|��Lf �0vE]gb0f�� Y[u v �Lf fju dVYeb0]`uL_afju v)dcZcbBY[Z��<|[f��B*� , (�( � � � �� &U���f Lb0]��f�b0v{},vE] ��f � ��f�� �gf��._aZj} �"f �$�f���YA=Lf��)�A�0Y�u.��v �Lf � � � & �\]gbpv �Lf � ��+ \( �W* � , � +z]�<v0Ye]`uA�&� ]D�\_aZ=} �$�f���Y � })�LY[_aZ���#=2|ef4uLZg_�f"�^})���0Y[u.�Tv ��f)]�Lv0Y[]`u �O(I+ |, ��� � * ��+�kw]gv ��f�b��MY��0f;v �Lf ��f�sZ��L|evd�Zg| ��f(�EvE]gb0f�� Y[u v ��f fjuwd^YebB]`uL_�fjuwv)d�ZcbBY�Z��<|ef��B*� & � * � �� |, ��� � * � �MY�|[|���f(� ]`uA�BY���f�b0f�� &C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� � � �'& ���

� ��& ���5Y��Ov ��fAu��L_�f�bBY��GY[u���f0 F]���Z)dcZg|[Y��8*VU+**�$�f���YA=���Zcv0Y[]`u � ]gbB_)�L|[Z)Z�� v �<Zg|[|e} |e]���ZcvEf��Y[u v ��f <b0]��f�b0v0Yef��"�LZcv0Z��<Z��0f�&U���f dcZg|[Y��LY[v }\]�� � �'& ��� dcZg|���f,Y�� ����f����gf�� ]D��v �w}�v ��f(�E}��EvEfj_ &

� � + �:`�g�V�';�> � D=� ��:g�V�.6�� ��� +C ��f������Mv ��f �:`�g�V�';�> �$�f���YA=Lf�� ]`u v �Lf � ]`_a_aZguA��W |[Y[u�f�&��:g����6�� � Y��(v ��fF_�]��A�L|ef)Y[uA�0v0ZguA� fMuLZg_�f � �LY�� �5v ��f4dcZcbBY[Z��<|ef��AY[u �:`�g�V�';�> _)�A�Ev ��ff�d�Zg| �LZcvEf�� Y[u &

� < * � � ,�� ������* � � , ����� �� Y���v ��f _aZ� �Y[_)�L_ LbB]��<|efj_ ��]D�LuA� �A�Ef��`� ��fju Y[uA� bBfjZ��0Y[u.� LbB]��<|efj_��]D�LuA� �Ev0Zcb0v0Y�u.� � bB]`_ ��f�b0].& jTu<|e}KuLZcv �LbBZg|,u��L_ ��f�b Zcb0frdcZg|[Y��&dcZg|���f�� � ]gb v �<Y��]�Lv0Ye]`u &�PH� u�]�d�Zg| ��frY��*�`Yedgfju�v ��f fjuwd^YebB]`uL_�fjuwv�dcZcbBY[Z��2|ef �\*� ,�� ������&d�Zg| ��frY��� ]`uA�0Y��Lf�b0f�� Y[uA�0vEfjZ�� &

� ; , ( ( � � � ��, (�( � � � �� dcZg|���f,_aZ=}*��fg�W�Z�uLZcv ��b9Zg|tu��L_ ��f�bFY[u qsmVk * � � , ����� �� ���"x &Fo ]D�BYev0Yedgf �0Y �`u q � ,� x ��Zgu4��f Zg|��E]����Ef��Z�� Lb0f>= a]�� v ��f u%�<_ ��f�b�&#i�uw}.Y�u dcZg|[Y���� ]`_ �<Y�uLZcv0Ye]`u�]�� ��]D�LuA�.ZguA� |e]w]���<Z�� � �MY[|[|��f(�$�^Y�A�f��*����bBY[u.� v ��f(�gfjuLf�bBZcv0Ye]`u ZguA���A�L_ <Y�u.� <b0]�� f����&WGZ u�f�`Zcv0Yedgf u��L_ �"f�b;Y[u q WBhckVW��\*� ,�� ������<x &(P u\v �LY � ��Z��Ef3, ( ( � � � �� Y�� � ]`uA�BY���f�b0f���Zd�Zg| ��f�bBfj|[Zcv0YedgfFvE] * � � ,�� ������ &7iFuw}\Y[uwd�Zg|[Y �I� ]`_ �<Y[uLZcv0Ye]`u.]�� ��]D�LuA�.ZguA��|e]w]���<Z�� ��MY[|[| ��f(�$�VY A�f�� �A��bBY�u.� v �Lf �gfju�f�bBZcv0Ye]`u�Lb0]�� f�� �&WAv ��f �0}^_ ��]`| � i �ekD� �LY���� _afjZguA� +�u�]a|e]^]�A�<Z�� � +WAv ��f �0}^_ ��]`| �����ekD� �LY�� � _�fjZguA�2+ Zg|[|?�]D� �BY �<|efT|e]^]�A�<Z�� �*� b0]`_ ��f�b0]avE] ,�� ������ ��� +

� : 5,�� � � * �|, ��� � * �aY��4v ��f uLZg_�f ]�� �A�L_ �f�� �LY�_aZ���\=2|ef��&�PH�(v �<Y��4]�Lv0Y[]`uA�MY���u�]gv � "f���Y[=Lf��6kd�Zcb9Y[Z��<|ef �B*� & � * � �� 5,�� � � * � �MY[|�| ��f�� ]`uA�0Y ��f�b0f�� & U��Lf =<|ef.uLZg_�f��0vEbBY[u.� _\Zj}� ]`u v0ZgY�u �$�f���Y[Zg| �0}^_ ��]`|���� �<Y���� �MY[|[| ��f._aZ�� b0]cW f0 �<ZguA�Lf�� vE]�� ]gbB_ v ��f�b0fjZg|�=<|ef

Page 47: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} , l

uLZg_�f�&Aop]D� �BY �<|ef �E}V_ ��]`|��)ZcbBfg�W;�I?z�2_�]��Lfj|6uLZg_�fb�MYev � 2Zcv � <Zcb0vW;� �{� _�]���fj|6uLZg_af��MYev ��]D�Lv 2Zcv � <Zcb0vW;� �2� ���bBb0fju v Lb0]��<|efj_ ��]D�LuA�W;�w|�� ���b0b0fjuwv4|e]^]�A�<Z����.dcZg|���fW;�wu6� Y[uA��f0 �]�� v �Lf ���b0b0fjuwv0|e}�Lb0]�� f�� �Ef�� � ]gbB_)�L|[Z�Y[u v ��f <b0]��f�b0v0Yef��"�LZcv0Z��<Z��0fW;�^�L�(v ��f � � �A� �LZcbBZ�� vEf�bC ]`_a_aZgu����� � � $ � ! ��+ �#� + � � � ! � � � � � � �#� � ���� � 6=� � �=��� �F� � ��� � � ��� 7(� � �

���� ������� � 6 ��� � ��� � � � 4 �� ����� � � �/�Z� � �����"� ���� � ��� � ����� ����� � � �/�Z� � �����"� ������ � � � � ��� � ���

� � ��� � ��� �Z� �"��� � � 4 ��*� $ �� �������"� ����� 6 6 � � � � � � ����� � ��� ����� ����� ��� � � ��� 7(� � � 7 ��� 6 �� 6��� � � ��� ��7��=��� 4 ��� � ���

<�6g��;`�.;L� �A6L�

� �6�

�:g��6�� � � � � � � ��8 � � � ��+ �:`�g�V�';�>?+ � D � �D:c����6��w����� � � < ; 6g�o<w� � �

� � ;*; :�:�� '>V�=<�� � � : <�D;%6g��>��'6��i �Mv ��f � � � , �e, � � �� �\* � ]`_a_aZgu��6k.����v)Yev"�gfju�f�b9ZcvEf���ZguA� ���L_ ���]`uL|[}\]`u�f(<b0]��<|efj_ �`Yedgfju Yev ���]D�LuA� ZguA� |[]w]�A�2Z�� � &C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� � � �'& ���

� ��& ���5Y��Ov ��fAu��L_�f�bBY��GY[u���f0 F]���Z)dcZg|[Y��8*VU+**�$�f���YA=���Zcv0Y[]`u � ]gbB_)�L|[Z)Z�� v �<Zg|[|e} |e]���ZcvEf��Y[u v ��f <b0]��f�b0v0Yef��"�LZcv0Z��<Z��0f�&U���f dcZg|[Y��LY[v }\]�� � �'& ��� dcZg|���f,Y�� ����f����gf�� ]D��v �w}�v ��f(�E}��EvEfj_ &

� � + �:`�g�V�';�> � D=� ��:g�V�.6�� ��� +C ��f������Mv ��f �:`�g�V�';�> �$�f���YA=Lf�� ]`u v �Lf � ]`_a_aZguA��W |[Y[u�f�&��:g����6�� � Y��(v ��fF_�]��A�L|ef)Y[uA�0v0ZguA� fMuLZg_�f � �LY�� �5v ��f4dcZcbBY[Z��<|ef��AY[u �:`�g�V�';�> _)�A�Ev ��ff�d�Zg| �LZcvEf�� Y[u &

� < , ��������,�� ������ Y��Ov ��f �0Y[u.�`|[f Lb0]��<|[fj_ ��]D�LuA�(�A�0f��,vE]��gfju�f�bBZcvEf)ZguA� ���L_ Yev&7jTuL|[}FuLZcv �LbBZg|u%�<_ ��f�b�ZcbBf dcZg|[Y�� dcZg|���f�� � ]gbFv �LY��M]�Lv0Ye]`u &�P � u�]adcZg|���f Y ���`Yedgfju v ��f fjuwd^Y[b0]`uL_�fjuwvd�Zcb9Y[Z��<|ef��\* , �������� Y��"� ]`uA�0Y ��f�b0f�� Y[u��EvEfjZ�� &

� ; , ( ( � � � ��, (�( � � � �� dcZg|���f,_aZ=}*��fg�WTZ uLZcv ��b9Zg|Au��L_ ��f�b Y[uKqsmVk;, ����� �� ���"x & op]D�0Yev0Yedgf �0Y �`u q � ,�� x ��Zgu��"f�Zg|��E] �A�Ef�� Z��Lb0f>= a]��tv ��f�u��L_ �"f�b &#iFuw}\Y[uwd�Zg|[Y �2� ]`_ �2Y[uLZcv0Ye]`u.]��O|efju.�gv ��ZguA��|e]w]���<Z�� �f��Y[|[|.��f�$�VY A�f�� �A��bBY[uA� v ��f �gfju�f�bBZcv0Ye]`u ZguA� �A�L_ 2Y[u.�)Lb0]�� f�� �&WMZ u�f�`Zcv0Yedgfau��L_ �"f�b Y[u q WBhck6W�, ��������<x &&iFuw} Y[uwd�Zg|�Y��4� ]`_ �<Y[u<Zcv0Ye]`u ]��z|efjuA�gv �rZguA�|e]^]�A�<Z�� � �MY�|[| �"f �$�VY A�f�� �A��b9Y[u.� v ��f(�gfju�f�bBZcv0Y[]`u Lb0]�� f�� �&WAv ��f �0}^_ ��]`| � i �ekD� �LY���� _afjZguA� +�u�]a|e]^]�A�<Z�� � +WAv ��f �0}^_ ��]`| �����ekD� �LY�� � _�fjZguA�2+ Zg|[|?�]D� �BY �<|efT|e]^]�A�<Z�� �*� b0]`_ ��f�b0]avE] ,�� ������ ��� +

� : 5,�� � � * �|, ��� � * �MY��pv ��f�uLZg_�f;]��Lv ��f"�A�L_ �f�� �LY[_aZ���F=<|ef�& PH�Lv �<Y��t]�<v0Ye]`uA�GY��pu�]gv3� "f���Y[=Lf��6kd�Zcb9Y[Z��<|ef �B*� & � * � �� 5,�� � � * � �MY[|�| ��f�� ]`uA�0Y ��f�b0f�� & U��Lf =<|ef.uLZg_�f��0vEbBY[u.� _\Zj}� ]`u v0ZgY�u �$�f���Y[Zg| �0}^_ ��]`|���� �<Y���� �MY[|[| ��f._aZ�� b0]cW f0 �<ZguA�Lf�� vE]�� ]gbB_ v ��f�b0fjZg|�=<|efuLZg_�f�&Aop]D� �BY �<|ef �E}V_ ��]`|��)ZcbBfg�W;�I?z�2_�]��Lfj|6uLZg_�fb�MYev � 2Zcv � <Zcb0vW;� �{� _�]���fj|6uLZg_af��MYev ��]D�Lv 2Zcv � <Zcb0vW;� �2� ���bBb0fju v Lb0]��<|efj_ ��]D�LuA�W;�w|�� ���b0b0fjuwv4|e]^]�A�<Z����.dcZg|���fW;�wu6� Y[uA��f0 �]�� v �Lf ���b0b0fjuwv0|e}�Lb0]�� f�� �Ef�� � ]gbB_)�L|[Z�Y[u v ��f <b0]��f�b0v0Yef��"�LZcv0Z��<Z��0fW;�^�L�(v ��f � � �A� �LZcbBZ�� vEf�b

Page 48: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} ,V,

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef�#� + � � � � $�)S^f�v �4v �Lf(�gfju�f�bBZcvEf��4Lb0]��<|[fj_ �"]D�<uA� &(op]D� �0Y �<|[f d�Zg|��Lf��4Zcb0f Zguw} uLZcv ��bBZg|6u��L_ �"f�b=k.����v4_)�A�Ev���f� ]`_ <Zcv0Y �2|ef'�MY[v � v ��f)���b0b0fjuwvMdcZg|���f)��fj|�� �^} v ��f d�Zcb9Y[Z��<|ef�7 � � � ��� ��7��=���'&�U���f �Lf� Z��L|[v4d�Zg| ��fY�� "�&A&

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef�#� + � �.� ! ����+��S^f�v �4v �Lf �gfju�f�bBZcvEf��4Lb0]��<|efj_ |[]w]� & op]D� �BY �<|efTdcZg|���f��)Zcb0fg�? i�uw}\uLZcv �LbBZg|<u��L_ �"f�b=k ����v;|ef�� �Ef�bzv �LZgu�v ��f ��Lb0b0fjuwvAdcZg|���fM]��tv ��fMdcZcbBY[Z��<|[f 7 � � � ��� ��� &GP uv �LY�����Z��0f,v ��f |e]^]� �]`Y[uwv4Y��)Z����E]`|��LvEf�&? i�uw} uLf�`Zcv0Yedgfau%�<_ ��f�bjk?����v��gb0fjZcvEf�b,]gb f 1��LZg|pv �LZgu W67 �S� � ���� ��� & PRu v �LY ����Z��0f2�$�f���YA=Lf��|e]^]� Y���v ��f |[]w]� |efjuA�gv � &? U���f(�E}V_ �"]`| � i �ekF� �LY���� _afjZguA� +�u�]a|e]^]�A�<Z�� � +�&? U���f(�E}V_ �"]`| �����ek-� �LY�� � _�fjZguA� +�Zguw}*�]D� �BY �<|efT|e]^]�A�<Z�� ����+�&

U���f(��f�sZ��L|ev)dcZg|���f,Y � � &~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef�#� + � � ���+ & � � � �����U��LY�� Y��Ov �Lf ��f�sZ��L|evF=<|efAu<Zg_�f �A�0f��'� �Lfju(�gfju�f�bBZcv0Y�u.��/FP$-�i C S(<b0]��<|efj_ ���L_ ��&pU��LY��Od�ZcbBY�Z��<|ef_aZj} ��f,v0Z��gfju Y[uwvE]\Z��� ]D�Luwv �^} Zg|[| � ]`_a_\ZguA�A�#� �LY���� �"fj|[]`u.��vE]\v ��f �gfju |ev0|��$�f�� �<_I� � Zg_\Y[|e}�&

/FP7- i C S =<|ef uLZg_�f ��Zgu � ]`uwv0ZgY[u��$�f���Y[Zg|3�E}V_ ��]`|�� � �LY�� �T�MY[|�| ��f f0 �<ZguA��f�� vE] b0fLb0f��EfjuwvFv ��fZ�� v �LZg|9=2|ef,uLZg_�f�& op]D� �0Y��<|ef(�E}V_ ��]`|��)ZcbBfg�? � @ U���f ���bBb0fju v0|[}�|e]`Z��Lf�� _�]���fj|6uLZg_�fb�MY[v � � �L|�|?<Zcv � &? � a U���f(��Lb0b0fjuwv0|e}�|[]`Z���f�� _�]���fj|OuLZg_�fb��Yev ��]D��v � �L|[|?<Zcv � &? � C U ��f)u%�L_af�bBY���Zg|^Y[uA��f0 ]��"v ��f"���b0bBfju v0|e} Lb0]�� f�� �Ef�� � ]gbB_ �<|[ZTY[u v ��f Lb0]��f�b0v0Yef��0�LZcv0Z��<Z��0f�&? � � U���f(��Lb0b0fjuwv0|e}��gfjuLf�bBZcvEf�� LbB]��<|efj_ |efju.�gv � &? � L U���f(���b0bBfju v0|e}��gfju�f�bBZcvEf���Lb0]��<|efj_ |[]w]�A�2Z�� � d�Zg| ��f�&

U���f(��f�sZ��L|ev)dcZg|���f,Y �)+����<L��<

�;w��;

��L�g�4�H8<���?>��^�'+=&

C ]`_a_aZgu��+ ) ��+�� � � ���*� ��� + � $ �� ������� ��� �� 6 ����� 4 � ��� � � � 4 �� � �4����Z� �� ��� � ���2�

� �4��������� � ����� � � � ��� �(���k� � � �14 ��� � 6L� <������.>`�

� �6� � � � � � � ��8 � � � � + �: �c���';%> + � D � ��:g����6�� ����� � � : <� ; 6g��>�� 6 �

C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� � � �'& ���

� ��& ��� Y � v ��f u��L_�f�bBY��\Y[uA��f0 r]��MZ d�Zg|�Y�� P <MX#iFQ � "f���Y[=���Zcv0Ye]`u � ]gbB_)�L|[Z Z�� v �LZg|[|e}|e]���ZcvEf�� Y[u v ��f Lb0]��f�b0v0Yef��"�LZcv0Z��2Z��Ef�&U���f dcZg|[Y��LY[v }\]�� � �'& ��� dcZg|���f,Y�� ����f����gf�� ]D��v �w}�v ��f(�E}��EvEfj_ &

� � + �:`�g�V�';�> � D=� ��:g�V�.6�� ��� +C ��f������Mv ��f �:`�g�V�';�> �$�f���YA=Lf�� ]`u v �Lf � ]`_a_aZguA��W |[Y[u�f�&��:g����6�� � Y��(v ��fF_�]��A�L|ef)Y[uA�0v0ZguA� fMuLZg_�f � �LY�� �5v ��f4dcZcbBY[Z��<|ef��AY[u �:`�g�V�';�> _)�A�Ev ��ff�d�Zg| �LZcvEf�� Y[u &

� : 5,�� � � * �|, ��� � * ��Y ��v ��fAuLZg_�f(]��Vv ��f ���L_ �f�� �LY[_aZ���h=2|ef�&OPRvt_aZj} � ]`uwv0ZgY[u(�$�f���Y[Zg|��0}^_ ��]`|��� �LY�� � �MY[|�|0�"f._aZ�� b0]cW f0 �<ZguA��f�� vE]�� ]gbB_:v ��f\b0fjZg|7=<|[fauLZg_�f�& o ]D���0Y �<|ef2�0}^_ ��]`|��Zcb0fg�W;�I?z�2_�]��Lfj|6uLZg_�fb�MYev � 2Zcv � <Zcb0vW;� �{� _�]���fj|6uLZg_af��MYev ��]D�Lv 2Zcv � <Zcb0vW;�wu6� Y[uA��f0 �]�� v �Lf ���b0b0fjuwv0|e}�Lb0]�� f�� �Ef�� � ]gbB_)�L|[Z�Y[u v ��f <b0]��f�b0v0Yef��"�LZcv0Z��<Z��0fW;�^�L�(v ��f � � �A� �LZcbBZ�� vEf�b

Page 49: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} , n

C ]`_a_aZgu����� � � � ���*� �#� + � $ �� ������� ��� ��� � � � 4 ��T� �4��������� ��� � ����� � �4��������� � ����� �

� � ��� � ���k� � � � 4 ��<�6g�

����V�A>`�

�`�O� � � � � � � ��8 � � � � + �: �c���';%> + � D � ��:g�V�.6�� ����� � � : <�D;%6g��>��'6��

C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� � � �'& ���

� ��& ��� Y � v ��f u��L_�f�bBY��\Y[uA��f0 r]��MZ d�Zg|�Y�� P <MX#iFQ � "f���Y[=���Zcv0Ye]`u � ]gbB_)�L|[Z Z�� v �LZg|[|e}|e]���ZcvEf�� Y[u v ��f Lb0]��f�b0v0Yef��"�LZcv0Z��2Z��Ef�&U���f dcZg|[Y��LY[v }\]�� � �'& ��� dcZg|���f,Y�� ����f����gf�� ]D��v �w}�v ��f(�E}��EvEfj_ &

� � + �:`�g�V�';�>?+ � D � �D:c����6��w���C ��f������Mv ��f �:`�g�V�';�> �$�f���YA=Lf�� ]`u v �Lf � ]`_a_aZguA��W |[Y[u�f�&��:g����6�� � Y��(v ��fF_�]��A�L|ef)Y[uA�0v0ZguA� fMuLZg_�f � �LY�� �5v ��f4dcZcbBY[Z��<|ef��AY[u �:`�g�V�';�> _)�A�Ev ��ff�d�Zg| �LZcvEf�� Y[u &

� : 5,�� � � * �|, ��� � * ��Y�� v ��f�uLZg_�f ]�� v ��f �A�L_ �f�� �LY[_aZ��� =<|ef�& PH� }g]D� �L] uL]gv ���Efv �LY�� ]�Lv0Y[]`u v �Lf �<Y[_aZ����=<|ef�uLZg_�f Y�� v0Z��gfju � b0]`_ v ��f�fjuwd^Y[b0]`uL_�fjuwv d�ZcbBY�Z��<|ef�B*� � � � � � & � * � �� |,�� � � * � &

?GY[|ef4uLZg_�f4_\Zj} � ]`u v0ZgY�uI�$�f���Y[Zg|.�E}V_ �"]`| � � �LY�� �3�MY[|[|���f4_aZ�� b0]cW f0 �<ZguA��f��avE](� ]gb9_v ��f,b0fjZg| �LY[_aZ���;=2|ef uLZg_�f�&Aop]D� �0Y��<|ef �E}V_ ��]`|��)Zcb0fg�W;�I?z�2_�]��Lfj|6uLZg_�fb�MYev � 2Zcv � <Zcb0vW;� �{� _�]���fj|6uLZg_af��MYev ��]D�Lv 2Zcv � <Zcb0vW;�wu6� Y[uA��f0 �]�� v �Lf ���b0b0fjuwv0|e}�Lb0]�� f�� �Ef�� � ]gbB_)�L|[Z�Y[u v ��f <b0]��f�b0v0Yef��"�LZcv0Z��<Z��0fW;�^�L�(v ��f � � �A� �LZcbBZ�� vEf�b~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef�#� + � � ���*� � � ���+ & � � � �����U��LY���Y��4v �Lf)��f�sZ��L|ev\=<|ef uLZg_af �A�Ef�� � ��fju��gfju�f�bBZcv0Y[uA�*/FP$-�i C S Y[uwd�Zcb��A�L_ '�&4U��LY��4d�ZcbBY�Z��<|ef_aZj} ��f v0Z��gfju Y[uwvE] Z��� ]D�Luwv �w} v ��f � ]`_a_\ZguA� �gfju Y[u dcZcb �<_2��& /�P$- i C S =<|efruLZg_af ��Zgu

� ]`u v0ZgY�uI�$�f���Y[Zg|.�E}V_ �"]`| � � �LY�� �3�MY[|[|���f)f0 �2ZguA��f��5vE] bBfLb0f��Efjuwv(v ��fMZ�� v �LZg|B=<|ef4uLZg_�f�&(op]D� �0Y��<|ef�E}V_ ��]`|��)Zcb0fg�? � @ U���f ���bBb0fju v0|[}�|e]`Z��Lf�� _�]���fj|6uLZg_�fb�MY[v � � �L|�|?<Zcv � &? � a U���f(��Lb0b0fjuwv0|e}�|[]`Z���f�� _�]���fj|OuLZg_�fb��Yev ��]D��v � �L|[|?<Zcv � &? � C U ��f)u%�L_af�bBY���Zg|^Y[uA��f0 ]��"v ��f"���b0bBfju v0|e} Lb0]�� f�� �Ef�� � ]gbB_ �<|[ZTY[u v ��f Lb0]��f�b0v0Yef��0�LZcv0Z��<Z��0f�&

U���f(��f�sZ��L|ev)dcZg|���f,Y �)+�������V�A>g�

��L�g�)� 8<���?>V�V�'+=&

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef�� $ �� � �����U���f SJi(U �0]`|edgf�b � � u<Zg_�f.Z�� v �LZg|�|e}rvE]4��fI���Ef�� & /Ff� Z��L|[v5SJi(U �E]`|edgf�b5Y�� SVP7- & /Ff�fjuA�LY[uA� ]`uv ��f)�`�'����� � ]`u =A�D��b9Zcv0Ye]`u6k�Zg|��E]�v ��f � ���LZ�:�S i(U �E]`|[dgf�b ��Zgu4��f Z=d�ZgY[|�Z��<|ef ]gb u�]gv&6<�]gv0Y�� f v �<Zcv�?���<Z�:rY �"� ]gb�u�]`uVW � ]`_a_�f�b ��Y[Zg| ���b�"]D�0f��z]`u<|e}�&

C ]`_a_aZgu���#� + � � " � � $ � � $ �� ������� ��� � �����=��� ��� ��� �� �-6 �0� ��� ��� &�� > ������� � � �`�O�

��w�����';%>`��6 � � � � � < �

�<_2� �0Y[_)�L|[ZcvEf ��]wf��pu�]gvpb0f 1��LYeb0fAZ��$�f���YA=���Zcv0Y[]`u vE]����LY[| �Tv ��f <b0]��<|efj_ k=��f���Z��A�Ef;]`uL|e}Tv ��f�_�]���fj|Y�� ���Ef�� vE]*���LY[| � Yev&)U���f <b0]��<|efj_ |[fju.�gv � Y��Mb0fLb0f��0fju vEf��4�w} v �Lf ���*� ]`_a_aZgu���<Zcb9Zg_�f�vEf�bjk"]gb�w} Yev � ��f� Z��<|ev�d�Zg|��Lf(�EvE]gb0f�� Y[u v �Lf,fju dVYeb0]`u<_�fju v)dcZcbBY[Z��2|ef �B*� , ����� �� &C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� < , ��������

,�� ������ Y��4v ��f,|efju.�gv � ]��Gv ��f �gfjuLf�bBZcvEf��4�BY[_ �<|[Zcv0Ye]`u &

Page 50: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} ,g(

] � ] 2 7B8 @�/0%;!670��3 # ��8�8:%435*�1P u v �LY��"�0f�� v0Ye]`uT�;f ��f�� � b9Y ��f�v ��f � ]`_a_aZguA�A�4v �LZcvMZg|[|e]*� vE]I�0Y�_ �L|�ZcvEfTZ2�`�'������� "f���Y[=���Zcv0Ye]`u &

C ]`_a_aZgu��!#� + � $ � $ � � � � ����� � ��� ��� � � ��������� � ����� ��� � D� �"����� ��� ��� ����"�^�=<

����A>`��6 � � � ��� � ����� � � � � � � � > ��� � � �4+��D:g�����w�A>��=���2�'+��

C ��]^]D�Ef�� Zgu fj|efj_�fjuwv � b0]`_�v ��f��0f�v ]��4Y[uLY[v0Y[Zg|0�Ev0ZcvEf���k ZguA� _aZ��gf��5Yev,v ��f �=���w�.6g�V� ���A>g�.6 q bBf W<|[Z���Y[uA� v ��f\]`| � ]`u�f�x & U ��fI���L]D�Efju �Ev0ZcvEf�Y � �EvE]gb0f�� Z�� v ��f =Lb �Ev �Ev0ZcvEf�]��4Z uLf9�vEbBZ�� f�b0fjZ���}vE]���fa|efju.�gv �Lfju�f�� �^} ���.6��6���Ev0ZcvEf�� �^} v �Lf � �j����;�>g�.6 � ]`_a_\ZguA� &.U ��f2�Ev0ZcvEf���Zgu ��f2����]D�EfjuZ��� ]gb��LY[uA�FvE] �LY>:"f�b0fjuwv3"]`|�Y���Yef�� � �LY���� ��Zgu)��f � "f���Y[=Lf�� dVY[Z�� ]`_a_aZguA�5|[Y�u�fA]�Lv0Y[]`uA�&#/z})��f�sZ��L|evv ��f �Ev0ZcvEf Y��"���L]D�Efju Y[u ZI��f�vEf�bB_aY[u<Y��Ev0Y��X�;Z=}�&C ]`_a_aZgu�� j�Lv0Ye]`u����� � X(f�b ��]D�Efj|e} <bBY[uwv �M]D��v � ��]D�Efju �Ev0ZcvEf qsZg|[|3�Ev0ZcvEf�dcZcbBY[Z��<|[f���k2]gv �Lf�b��MY��Ef5Yev�LbBY[uwv ��]D��v]`uL|e} v ��fM|[Z���fj|^��� "M]���v ��f��Ev0ZcvEf � ��]D�Efju6k=� ��f�b0f)�5Y��(v �Lf4u%�L_ ��f�b(]���v ��fMu�f9� vEb9Z�� fgkv �LZcvMY��4v ��f,u%�<_ ��f�b)]��GvEbBZ�� f�� �0]2� Zcb �gfju�f�bBZcvEf��4<|��A�;]`u�f�x &� � QMZguA�L]`_a|e}*<Y�� ���)Z2�Ev0ZcvEf � bB]`_ v ��f(�Ef�v4]��(Y[u<Yev0Y[Zg| �Ev0ZcvEf��&� � ~AuLZ��2|ef��pv ��f"�A�Ef�b(vE] Y[uwvEf�bBZ�� v0Yedgfj|e} <Y�� �)�.5Zgu�Y[uLYev0Y[Zg|%�Ev0ZcvEf�& U���f"�A�0f�bGY � bBf 1%��f��0vEf��vE] ����]^]D�Ef�Z �Ev0ZcvEf � b0]`_ Z�|�Y��EvM]�� �]D� �0Y �<|[f YevEfj_2��q f�dgf�b0} YevEfj_ Y[u v ��f�|[Y��Ev���]wf��Bu � v

� ��]*� �Ev0ZcvEf,dcZcbBY[Z��<|ef�� �Lu����LZgu.�gf�� �MY[v �.bBf��$�f�� v;vE]aZ <b0f�d^Y[]D�A�zY[vEfj_.x & P �Ov ��f u%�<_5W��f�b ]�� �]D� �0Y �<|[f �0v0ZcvEf�� Y � vE]w] �LY �D�6k v ��fju v �LfI�A�Ef�b)�LZ��,vE] �$�f���Y � }��E]`_�fI� ��bBv ��f�b� ]`uA�EvEbBZgY�u v ��Z�� + �BY[_ <|efTf0 �Lb0f�� �BYe]`u0+�&

� >/TY��$<|[Z=}��pZg|[|��Ev0ZcvEf)dcZcbBY[Z��<|ef��;q ���LZguA�gf���ZguA� �<uA���LZguA�gf�� ��Yev � bBf��$�f�� vtvE] Z <b0f�d^Y[]D�A�YevEfj_.xMY[u Zgu Y[uwvEf�bBZ�� v0Yedgf)<Y�� �VY[u.�.&)U��<Y��4]�Lv0Y[]`uT�;]gb ����]`uL|e} Y �Gv ��f � �a]�<v0Ye]`uA� �<Z����f�fju �$�f���YA=Lf�� &

� � +��D:c�6���^�A>V���V�"�'+J �0f��M�D:g�����w�A>��=���2��vE] bBf��EvEbBY�� vzv ��f��0f�vz]��OY[u<Yev0Y[Zg|A�Ev0ZcvEf���Y[u � �LY�� �av ��f �Ev0ZcvEf �LZ��zvE]��f <Y�� �gf�� &)��:g�6���^�.>����V�"�,_ ���Ev"��f fjuA��|e]D�Ef�� ��f�v\�zf�fju4��]D�.�<|efb1���]gvEf�� +*+�&

C ]`_a_aZgu�� ) ��1 $ � ��+9�� � ��� �43 � ��� � �����=����� ���� ������� � 6S� ��� � �o �� ��������� ��� � :D5��w�A>���6<� � � � � ��� � ��� � � � � � :*:c���D�^��� � L� ;%6 � � � � � > � �w�A>V�D6 � �^�`���6`� �S���]*� �Mv �Lf,vEbBZ�� f�� ���b0b0fjuwv0|e} �EvE]gb0f�� Y[u �0}��EvEfj_ _�fj_�]gbB}gk"Y �GZguw}�&\/;} ��f� Z��<|evMYev ����]/� �Mv ��f |�Z��Ev

�gfju�f�bBZcvEf�� vEbBZ�� fgk2Y�� Zguw}�&C ]`_a_aZgu�� j�Lv0Ye]`u����� � X(f�b ��]D�Efj|e}(<bBY[uwv �tvEbBZ�� f�� � ]`uwvEfjuwvMqsZg|[|��Ev0ZcvEf)d�Zcb9Y[Z��<|ef���k�]gv ��f�b���Y��Ef�Yev <bBY[uwv �O]D��vG]`uL|e}v ��]D�Ef,dcZcbBY[Z��2|ef���v �LZcv �LZ=dgf � �LZgu.�gf�� v �LfjYeb)d�Zg| ��f � bB]`_ Lb0f�dVYe]D�A�"�Ev0ZcvEf�x &� � o bBY�u v �)]`u<|e}\v ��f vE]gv0Zg|tu��L_ ��f�b)]�� ���b0bBfju v0|e}*�EvE]gb0f�� vEb9Z�� f��&� > o bBY�u v �4Zg|�|�v ��f ���b0bBfju v0|e}*�EvE]gb0f�� vEb9Z�� f��&� � oAY �f��zv ��fF]D��v$���v;v ��b0]D�.�D��v ��f�Lb0]��gb9Zg_ � "f���Y[=Lf��2�^}\v ��f �JCIEIRgHI����fj|[|LdcZcbBY[Z��2|ef�Y �

��f>=<u�f��Ok�fj|��Ef v ��b0]D�A�D� v ��f�Y.�LD ��� ]`_\_aZguA� +�_�]gb0f�+�&

Page 51: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} ,IO

� : :g���D�^�V� � L� ; 6�rbBYevEf��Mv ��f,]D��v$��Lv"�gfju�f�bBZcvEf�� �^}�v ��f � ]`_a_aZgu�� vE]�:g�V� �w��� � <�D;%6�w�A>���6

��^� � �6`�U���f\q ]gb��<Y[uLZg| xzY���fjuwv0YA=Lf�b4u��L_ ��f�b)]��pv �Lf vEbBZ�� f vE]2��f LbBY�u vEf�� &

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef ) ��1 ��� $ � $ ��C ]`uwvEb0]`|���v ��f,_aZ� �Y[_)�L_ u%�<_ ��f�b;]��3�Ev0ZcvEf�� � ��]/�;f�� �A��b9Y[u.� Zgu Y�u vEf�bBZ�� v0Y[dgf(�0Y[_)�L|[Zcv0Ye]`u �Ef�� �BYe]`u &op]D� �0Y �<|[f d�Zg|��Lf��)Zcb0f Y[uwvEf�gf�b���� b0]`_:hTvE] h�mgm�&zU��Lf �Lf� Z��L|[v)d�Zg|��Lf,Y���Ggn�&

C ]`_a_aZgu�� � � " � � $ � � � ������� ��� � ����� � �(�����"� �� � ��������� � ����� ���� � ���0� �/� � � 6 ��� ��� �� �j����;�>g�.6 � � � ��� � � � � ��� � � � � � � � � > ����� � ��+��D:c�6���^�A>V���V�"�'+�� ����6��6��Ffju�f�bBZcvEf���Z �Ef 1���fjuA� f�]��MZcv5_�]D�Ev����.6��6� �Ev0ZcvEf�� q b0fLbBf��Efju v0Y�u.� Z4�]D� �0Y �<|[f�f0 ^f����v0Y[]`u ]��Mv ��f_�]���fj| x9k?�Ev0Zcb0v0Y[u.�I� b0]`_�v ��f � � ������ ��� � � �&�U���f)���b0b0fjuwv �0v0ZcvEf _)�A�Ev �"f)�Ef�vFd^Y[Zav ��f � � �� ��� � � �]gb ��(���( ��� � � �)� ]`_\_aZguA�A�&P{v5Y�� �]D� �0Y �<|[f�vE] b��<u v ��f*�0Y[_)�L|[Zcv0Ye]`u Y[u v �Lb0f�f ��Zj}�� qsZ��� ]gb��LY�u.� vE]��LY�:�f�b0fjuwv � ]`_a_\ZguA��|[Y[u�f�]`|[Y���Yef��9x9� ��f�vEf�b9_aY[uLY��0v0Y���q v ��f ��f�sZ��L|ev)_�]���f�x9kLbBZgu���]`_ ZguA� Y[uwvEf�bBZ�� v0Yedgf�&U���f.b0f�� �L|ev0Y�u.� �Ef 1���fjuA� f.Y � �EvE]gb0f�� Y[u Z vEbBZ�� f Y[uA��f0 Vf�����Yev � Zgu Y[u vEf�gf�b5u��L_ ��f�b v0Z��^Y[uA� Y[uwvE]Z��� ]D�LuwvFv �Lf vE]gv0Zg|pu%�L_ ��f�bM]��GvEbBZ�� f�� �EvE]gb0f�� Y[u v �Lf �E}��EvEfj_ &4U��Lf�b0f Y���ZI�LY�:�f�b0fjuwv���f��LZjdVYe]gbFY[uv ��f �;Z=}\vEbBZ�� f��)Zcb0f����LY�|ev�kwZ��� ]gb��<Y[u.� vE] ��]*� � � ������ ��� � � �,Y�� �Ef�v�� � ��� � ��� ��� � � � Y��;Zg|>��Zj}�� ���vZcv�v �Lf ��f�`Y[uLuLY�u.��]�� Z\u�f9�DvEbBZ�� f q �E].Y[v �MY[|�| � ]`u v0ZgY[u ZcvT_�]D�Ev �EvEf�� ,rh �Ev0ZcvEf��9xMf0 .� fLvX� ��fjuYevTY��4v ��f5|[Z��Ev��Ev0ZcvEf5]��AZgu f0 VY��0vEfju vF]`|�� vEbBZ�� f�&�P u v �LY�����Z��Ef v �Lf ]`|�� vEbBZ�� f5Y��F|efju.�gv ��fju�f��4�^} Zcv_�]D�Ev �0vEf����Ev0ZcvEf��&C ]`_a_aZgu�� j�Lv0Ye]`u����� � o bBY�u v � ���bBb0fju v0�gfju�f�b9ZcvEf��avEbBZ�� f q ]`uL|[} v ��]D�Ef)dcZcbBY[Z��2|ef��8� ��]D�Ef�dcZg|���f"���LZguA�gf�� � bB]`_v ��f(LbBf�d^Ye]D���"�Ev0ZcvEf�x &� � X(f�b ��]D�Efj|e} LbBY�u v ����Lb0b0fjuwv��gfju�f�bBZcvEf�� vEbBZ�� f q ���LZgu.�gf�� ZguA�4�LuA���<Zgu.�gf����Ev0ZcvEf d�Zcb9Y WZ��<|ef��9x &� � oAY�������Z �Ev0ZcvEf � b0]`_ ZI�Ef�v4]��3"]D���0Y �<|ef�� ��v ��b0f(�Ev0ZcvEf���Y[u Z�bBZgu���]`_^��Zj}�&� � ~AuLZ��2|ef��Av �Lf��A�0f�bzvE]�Y[uwvEf�bBZ�� v0Yedgfj|e}�����]^]D�EfTf�dgf�b0}��0v0ZcvEfF]��tv ��f�vEb9Z�� fgkA�EvEf �w}I�0vEf &PH� v ��f u��L_ ��f�b ]�� �]D� �BY �<|ef �Ev0ZcvEf�� Y���vE]^] �LY �D�6k�v ��fju&v ��f �A�0f�b �<Z�� vE] �$�f���Y � }

�E]`_�f � ]`uA�EvEb9ZgY[u v �FZ�� �0Y[_ 2|ef,f0 �Lb0f�� �0Y[]`u &MU���f��0f)� ]`uA�0vEbBZgY[uwv ��Zcb0f �A�Ef�� ]`uL|e} � ]gb Z�0Y[u.�`|[f��0Y[_)�L|[Zcv0Y[]`u �EvEf ZguA� Zcb0f B( � � (�� � ���&Y[u v ��f*� ]`|[|e]/��Y[u.� ]`u�f���& U ��f�} Zcb0f�vE]��faY[u vEfju���f��rY[urZgu ]�A�]D�0YevEf;��Zj}c�MY[v � b0f��$�f�� v vE] v ��]D�EfI� ]`u��EvEbBZgY[uwv � f�dgfjuwv �LZg|[|e}fju vEf�bBf�� �MYev � v ��f 2Y�� � �0v0ZcvEf � ]`_a_aZguA�Ok�]gb�����bBY[u.��Zgu�Y[uwvEf�bBZ�� v0Yedgf �BY[_ �<|[Zcv0Ye]`u�Ef�� �0Y[]`u q � ��fju v ��fau��L_ �"f�bT]�� � �Lv ��b0f �Ev0ZcvEf��,vE] ��f �LY��$2|[Zj}gf��rY��FvE]^] �LY �D�2x9k6v �<ZcvZcb0f , ( � ,(]`uL|e}�vE].Z2�BY[u.�`|ef(�EvEf ]��Gv ��f �0Y[_)�L|[Zcv0Y[]`u ZguA� Zcb0f B( � � (�� � ��� Y[u v ��f u�f0 Vv]`u�f�&

� >/TY��$<|[Z=}�� Zg|[|zv ��f��0v0ZcvEf�dcZcbBY[Z��2|ef���q � �LZgu.�gf���ZguA���LuA� �LZgu.�gf��2x �A��bBY�u.� f�dgf�b0} �0vEf]��MZgu Y[u vEf�b9Z�� v0Yedgf*�0f�� �0Ye]`u & U��LY�� ]�Lv0Ye]`u��;]gb ��� ]`uL|e}rY �)v ��f � � ]�Lv0Y[]`u �LZ�� ��f�fju�$�f���YA=Lf�� &

� � +��D:c�6���^�A>V���V�"�'+opf�b � ]gb9_2��Z*�0Y[_)�L|[Zcv0Y[]`u Y[uT� �LY����4� ]`_ ���v0Zcv0Y[]`u Y��Mb0f��EvEbBY � vEf�� vE] �Ev0ZcvEf�� �0Zcv0Y��$� }VY[u.�v ��]D�EfF�D:c�6���^�A>V���V�"��&tU���f ��f��0YebBf�� �Ef 1���fjuA� f�]����0v0ZcvEf�� � ]D�L|��5u�]gvpf0 VY �Ev(Y �A� �A� �)� ]`u�W�EvEbBZgY[uwv � �;f�b0f)vE]^](�EvEb0]`u.� ]gbAY[vG_\Zj} �LZ�A�fju v �LZcv Zcv �E]`_�f"�]`Y[uwvp]��2v ��f��BY[_ �<|[Zcv0Ye]`u

Page 52: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} , i

Z � �Lv ��b0f �Ev0ZcvEfI�0Zcv0Y�� � }VY[u.��v ��]D�Ef � ]`uA�EvEb9ZgY[u v � �L]wf��0u � vFf0 �Y��Ev��TY[u v �LZcv(��Z��EfaZ vEb9Z�� f�MYev �5ZTu%�<_ ��f�bp]��'�Ev0ZcvEf�� |[f�� �pv �LZgu����.6��6�)vEbBZ�� f4Y��p]��Lv0ZgY�u�f�� &F<�]gvEfg�;��:g�6���^�.>����V�"�_ ���Ev���fTfjuA��|e]D�Ef����"f�v\�zf�fju4��]D�.�<|[f+1���]gvEf�� +*+�&

���.6����- Z� �Y[_)�L_ |efju.�gv � ]��)v �Lf2<Zcv � Z��� ]gb��LY[u.� vE] v ��f*� ]`uA�EvEbBZgY�u v �& U��Lf.|efju.�gv � ]��4ZvEbBZ�� fI� ]D�L| � � ]`u v0ZgY[ur|[f�� �Tv �LZgu�����6������Ev0ZcvEf���� v �LY��TY��Tv �Lf ��Z��0f\Y[u � �LY�� ���0Y[_)�L|[Z�Wv0Ye]`u �EvE]��� Y[u ZgurY[u vEf�b9_�f��LY[ZcvEf �EvEf ��f���Z��A�Ef�Yev _aZ=} uL]gv f0 VY��0vTZguw}�� ��v ��bBf �0v0ZcvEf�0Zcv0Y��$� }VY[u.��v ��]D�Ef(� ]`u��EvEbBZgY[uwv �&

] � k � �6%)I(�A1 � 351 q.�AIp!�70�F3 # �F8?8:%435*�1i�vEbBZ�� f)Y�� Z �Ef 1���fjuA� f;]��A�Ev0ZcvEf��0� ]gb0b0f�� "]`u��LY[u.�)vE]TZ �]D� �BY �<|efGf0 Vf����v0Ye]`u ]��Lv ��fz_a]���fj|B& U bBZ�� f��GZcb0f

� b0fjZcvEf�� �^}2�`�'�����;� �Lfju.Z � ]gb9_ �L|�Z Y�� � ]D�<uA�\vE] ��f �sZg|��Ef �Vv ��f�}.Zcb0fFZg| �E] �gfjuLf�bBZcvEf�� �w}\v ��f��BY[_ �<|[Zcv0Ye]`u� fjZcv �Lb0f5q SVf�� v0Ye]`u ,.&-,Sl SVY[_)�L|[Zcv0Ye]`u C ]`_a_aZguA��� m k <Z��gfc,g(`x &A~AZ�� �\vEb9Z�� f��LZ��zZ u��L_ �"f�b=kwZguA�\v ��f �Ev0ZcvEf��Zcb0f u��L_ �"f�bBf�� �MYev �LY[u�v ��f vEbBZ�� f�&AU bBZ�� f ���LZ����Ev0ZcvEf�� �L" � � �L"�� � �T" � �"+N" " "B+=&U���f�vEbBZ�� fFY�uA�$�f�� v0Ye]`u2� ]`_a_\ZguA�A� ]�� � �'������Zg|[|e]/�KvE] u<ZjdVY �`ZcvEfFZg|[]`u.� v ��f�vEbBZ�� f�� Lb0]��A�A� f�� �^} � ������� &/ ��bBY[u.� v �Lf\uLZjdVY �`Zcv0Ye]`uOk v ��f�bBf\Y��,Z � � ������� ��� � � � kGZguA�rv ��f � ��� � ��� ��� � �� Y�� v ��f\vEbBZ�� f\v ��f � � ��������� � � � ��fj|e]`uA�D�)vE].&AU���f(� ]`_\_aZguA�A�4ZcbBf,v ��f � ]`|[|e]/��Y[u.���

C ]`_a_aZgu����� $ � $ � $ � � $ ����� � � � � � 4 �� ��� ��� � ��� � �����=���<�: �.:

����A>`��6 � � � � ���A>g�.6

- Z��gf��T���A>g�.6 v ��f ����������� ��� � � � &AU �LY�� � ]`_a_\ZguA�.Y � �A�Ef��\vE] u<ZjdVY �`ZcvEfFZg|[]`u.�D�AvEb9Z�� f�� Lb0]��A�A� f���w} < �"S.- X)&?/��LbBY[u.��v ��f5uLZjdVY �`Zcv0Ye]`u6k6v �Lf�b0f�Y���Z ����������� ��� � � � k ZguA� v ��f � � ������� ��� � �\Y��Fv ��fvEbBZ�� f v �Lf� � ��� � ��� ��� � � � ��fj|e]`u.�D��vE].&

C ]`_a_aZgu��! � � �.$ + " ����� �0$ $ � $ � � � ��� � � ����� ��� �'����� � �� � ��� ��� ��V�2���V�

������w�.6c���

����.>`�.6 � � � ��� � ���o bBY�u v �)v �Lf,uLZg_�f,]��pv ��f� ����������� ��� � � � Y�� ��f>=<uLf�� &

C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� � o bBY�u v �)v �Lf d�Zg|��Lf ]��GZg|�|�v ��f(�Ev0ZcvEf dcZcbBY[Z��2|ef���]��Gv ��f � ��� � ��� ��� � � �&

] � r � 3F!"�A� �j%)I(� !�� ! l5� � � J %)I �;%;^��� ������� �A�Ef���v ��f �Ev0ZcvEfr]�� v �Lf Zcb0v / / / <Z�� �cZ��gf C J�/ / � �����T�����$& C ]`uwvEb0]`|F]=dgf�b v ��f / / /

<Z�� �cZ��gf���Zgu�dgf�b0} Y[_ �]gb0v0Zguwv vE] v �Lu�f�v ��f �f�b � ]gbB_aZguA� f.]��Mv ��f �E}��EvEfj_ &rP u 2Zcb0v0Y���L|[Zcb=kpv �Lf.]gb��Lf�b]��zdcZcbBY[Z��2|ef���Y ��� b9Yev0Y���Zg|pvE] � ]`u vEbB]`|Gv ��fa_�fj_�]gb0} ZguA� v ��f5v0Y[_�f5b0f 1��LYeb0f��4�^} ]��f�bBZcv0Ye]`uA�F]�dgf�b / / /���&Q4f�]gb��Lf�bBY[u.� _af�v ��]���� ��Zgu��"f�Z�� v0Yed�ZcvEf���vE])��f�vEf�bB_aY[uLf���f�vEvEf�bzdcZcbBY[Z��<|[f)]gb���f�b���k^Y[ua]gb ��f�bAvE] b0f��A�A� f�v ��f�0Y���f,]��pv ��f,f0 �Y��Ev0Y�u.��/ / / �&;Q4f�]gb���f�b9Y[u.��_�f�v ��]��A����Zgu��"f Z�� v0YedcZcvEf�� fjYev ��f�b

QMf�]gb���f�bBY[uA� ]��Tv ��f dcZcbBY[Z��<|ef��I��Zgu ��f vEbBY����gf�b0f�� Y[u v[�;] ��Zj}������w}�v ��f����Ef�bjk�]gbI�^}�v ��f / / /<Z�� �cZ��gf�& PRu v ��f =<b��Ev���Zj}gk(b0f�]gb ��f�bBY[u.� Y��,vEbBY����gf�b0f�� �^}rv ��f�Y[u vEf�b9Z�� v0Yedgf*����fj|[| � ]`_a_\ZguA� 8�� ��>��6�^�

��.>`��: ��8�6 �<���o<f�MYev � v ��f � \]�<v0Ye]`u &QMf�]gb���f�bBY[uA� Y�� vEbBY����gf�b0f�� �w} v ��f / / / <Z�����Z��gfT� ��fju v ��f u%�L_ ��f�b ]��Fu�]���f�� b0fjZ�����f��\Z4�`Y[dgfjuv ��b0f�� �L]`|�� &4U���f v ��b0f�� ��]`| � Y���Y[uLYev0Y[Zg|�Y���f�� ZguA� Z��LvE]`_aZcv0Y���Zg|[|e} Z����$�A�0vEf�� Z�� vEf�bFfjZ�� � b0f�]gb���f�bBY�u.�2�^} v ��f

<Z�� �cZ��gf�& U��LY���Y�� ��Zg|[|ef�� ��}VuLZg_aY���Zg|Fb0f�]gb��Lf�bBY[u.��k4ZguA� ��Zgu ��f fjuLZ��<|ef�� ]gb �LY��BZ��<|ef�� �^} v �Lf �A�0f�b�&/F}^uLZg_\Y��)b0f�]gb��Lf�bBY[u.� Y��(fju<Z��<|ef��;�MY[v �5v ��f � ��fj|�|.� ]`_a_aZguA�28�� ��>��6�^�

��A>g�

�:`��8�6 �2�=�D< ��Yev ��v ��f)]�Lv0Y[]`u

� 6<kLZguA� �<Y��0Z��<|ef�� �MY[v � v ��f � 8\]�Lv0Y[]`u &~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef� � �*�#� � � � �� ��� �S��f���YA=Lf��;� ��f�v ��f�bI��}VuLZg_aY � b0f�]gb���f�bBY�u.� Y���fjuLZ��2|ef�� q � ��fju d�Zg|��Lf Y�� � &�� x5]gb��<Y��0Z��<|ef�� q � ��fjud�Zg| ��f,Y�� � " � x &

Page 53: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} , F

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef�������,�%��� ��� $�) ���S��f���YA=Lf��)v �Lf ]gb���f�b9Y[u.�a_�f�v ��]�� vE]��"f �A�Ef��S� �Lfju���}VuLZg_aY��TdcZcbBY[Z��2|ef b0f�]gb���f�b9Y[u.�aY��;=<b0f�� &zU ��f�]D� �0Y �<|[f�dcZg|���f���kA� ]gbBb0f��$�]`uA�LY[uA� vE]av ��f bBf�]gb���f�bBY[uA�5_af�v ��]����)ZjdcZgY[|[Z��<|efb��Yev ��v ��f C J�/�/ 2Z�� �wWZ��gfgk2Zcb0f |[Y��EvEf�� ��fj|e]*�(& U���f(��f�sZ��L|ev�dcZg|���f,Y��,� � � &� � w�2� - ]�dgf�� fjZ�� � dcZcbBY[Z��<|[f v �Lb0]D�.�D��]D��v v ��fr]gb ��f�b vE] =<uA�&Zgu�]�<v0Y[_aZg|��]D�0Yev0Ye]`u � ]gbv �LZcv4dcZcbBY[Z��<|[f5qsZ�� ���L_aY[u.��Zg|[|"]gv ��f�bMd�ZcbBY�Z��<|ef���Zcb0f8= Vf��2x & U��LY � �gfjuLf�bBZg|[|e}�Z����LYef�dgf��

�gb0fjZcvEf�b �0Y���f b0f��A��� v0Ye]`uA��v �LZgu v ��fb�MY[uA�L]/� _�f�v ��]��6k.���Lv4Y��"�0|e]*�zf�b�&�.>c�A8�:��O� oGZgYeb��4]��GdcZcbBY[Z��<|[f��4Zcb0f,bBZgu���]`_a|e} ����]D�0fju6k<ZguA�4�)�;Z��"f�� Y[u v ��f ]gb ��f�b�&zU ��f(�)��Z�Y�� "f�b�� ]gbB_af�� �w}.Z �Ef�bBY[f��A]�� �)��Z���z]��OZ����0Z�� fju v�dcZcbBY[Z��<|ef���&pU��Lf ��f��EvA]gb ��f�bzZg_�]`uA�v ��]D�EfT]��Lv0ZgY[uLf��I�^}av ��f �Ef�bBY[f��A]�� ���;Z����Y��zb0f�v0ZgY[uLf�� &(U���fTu%�L_ ��f�bz]�� <ZgYeb�� ����]D�Efju

� ]gb��)��Z�A<Y[u.�5f 1��LZg|���v ��f u%�L_ ��f�b)]��Gd�ZcbBY�Z��<|ef��)Y[u v ��f(�<Y[Z��gbBZg_ &�.>c�A8�:��

������.:`�"�SVZg_�f\Z�� �.>c�A8�:��Ok ����v v ��fav\�z] d�Zcb9Y[Z��<|ef��,ZcbBfI����]D�0fju �E] v �<Zcv v ��f =<b��Ev,Y��,Z���]�dgfv ��f�dcZcbBY[Z��<|ef �MYev � v ��f�|[Zcb �gf��0vTu��L_ ��f�bF]��;u�]���f���k6ZguA� v ��f �Ef�� ]`uA�rY�����fj|e]*�Dv �<Zcvd�Zcb9Y[Z��<|ef�&zPRu4��Z��Ef v ��f�bBf Zcb0f �0f�dgf�bBZg|OdcZcbBY[Z��<|[f��)v0Yef�� � ]gbMv �Lf _aZ� �Y[_ �<_ u%�<_ ��f�b4]��u�]���f���k�v ��f,]`uLf ��|e]D�Ef��Ev)vE].v ��f b0]^]gvMY��"�A�0f�� &

� � w����:g����6 �g<�6<�U���f��w� w� _�f�v ��]�� Y��4YevEf�bBZcvEf����Lu v0Y�|6u�] � �Lb0v ��f�b4Y[_ <b0]=dgfj_�fjuwvMY��4]��Lv0ZgY[u�f�� &

�$�g�^�'6 �w� ���w� w�"�U��LY��G_�f�v �L]��5Y��GZgu�Y[_ 2|efj_�fjuwv0Zcv0Ye]`u ]�� �E}V_a_�f�vEbBY�� �0Y � v0Y[u.�.& P{v(Y��0�0Y�_aY[|[ZcbpvE] �0Y � v0Y[u.��k�MYev �r]`uLf\Z��A�LYev0Y[]`u6�TX ZcbBY[Z��<|ef��,v �LZcv(��f�� ]`_�f\Z����0Z�� fjuwv �A��b9Y[u.� �0Y � v0Y[u.� Zcb0favEf��EvEf��� ]gb��0}^_a_af�vEb0}�& P �tv ��f�}�Zcb0f �E}^_\_�f�vEbBY��ckVv ��f�} Zcb0f |[Y[u.�gf�� Y[u Z)�gb0]D�. &zSVY � v0Y[u.� v �Lfju� ]`u v0Y�u%��f�� �MYev � Z �gbB]D�. ��fjY[u.��_�]�dgf��6k<Y[uA�0vEfjZ�� ]��pZI�0Y[u.�`|efTdcZcbBY[Z��<|[f�&

�$�g�^�'6 �w� ���w� w�

��D:c���.6`� <�6<�U���f ���c�^� 6`�^���

�� � � _af�v ��]�� Y��,YevEf�bBZcvEf�� �Lu v0Y�|(u�] � �Lb0v ��f�b,Y[_ <b0]=dgfj_�fjuwv Y��,]���Wv0ZgY[u�f�� &

52���A8�:D5 �@�� � �O#��L�opf�bB_ �LvEf��Tv ��f dcZcbBY[Z��2|ef�� ��Yev �LY[u��MY[uA��]*� �4]�� � Z����0Z�� fju vTdcZcbBY[Z��<|ef��jk-� �Lf�b0f�� ��Zgu��f fjYev ��f�b G^k2l�]gb+,�k��E]\Z��4vE]._aY[u<Y[_aY���f�v ��f,]=dgf�b9Zg|[|m/ / / �0Y���f�&

52���A8�:D5 �@�� � �O#����D:c���.6`� <�6<�U���f �MY[u���]/� %G^k l^k-,��r_af�v ��]�� Y � Y[vEf�bBZcvEf�� �Luwv0Y[|;u�]�� ��bBv ��f�b�Y[_ Lb0]�dgfj_�fjuwvaY�� ]���Wv0ZgY[u�f�� &

< �.:g�%���w� �"�U��LY��T_�f�v �L]�� Y ���BY[_aY[|[ZcbFvE] ���c�^� 6`�^���

�� � �"k��'��v �A�Ef��,_�]gbBf)�gfjuLf�bBZg| � bBYevEf�b9Y[Z�vE]

� b0fjZcvEf �gbB]D�.��&< �.:g�%�

��w� �

��D:g�V�.6`� <�6L�U���f#<w��:g���

�� � w� _�f�v ��]��aY�� Y[vEf�bBZcvEf��I�Luwv0Y[|Vu�](� ��b0v �Lf�b Y[_ Lb0]�dgfj_�fjuwvAY��G]��Lv0ZgY[uLf�� &

>��^��6�>�;V���D<<� U��LY��M_�f�v ��]�� Y���Zgu Y[_ 2|efj_�fjuwv0Zcv0Ye]`u ]�� �0Y[_)�L|[ZcvEf�� ZguLu�fjZg|[Y[uA�2� ]gb�d�Zcb9Y[Z��<|ef ]gb��Lf�bEWY[u.�.& U��<Y��)_�f�v ��]�� Y�� �]gvEfjuwv0Y[Zg|[|e}.dgf�b0} �0|e]/� &<�6g��6`�2�w�V� U��LY��p_�f�v ��]�� Y�� Zgu5Y[_2<|efj_�fjuwv0Zcv0Ye]`u,]��"Z �gfjuLf�v0Y���Zg| �g]gbBYev �L_ � ]gb dcZcbBY[Z��<|[fA]gb���f�b9Y[u.�.&U��LY��)_af�v ��]�� Y�� �]gvEfju v0Y[Zg|�|e}\dgf�b0} �0|[]/�(&6��.>����"� U��LY��;_�f�v ��]���Y[_ <|efj_afju v �;Z �L}^uLZg_\Y���LbB]��gbBZg_a_aY[uA� Z�ALbB]`Z�����vE]5f0 VZ�� v�b0f�]gb��Lf�bEWY[u.�.&rPRv5]`uL|e} �EvE]gb0f���Z�/ / / Zcv5Z v0Y[_af�& U���f�b0f� ]gb0fgkAYev5Y�� b0fj|[Zcv0Yedgfj|[} f9RI��Yefjuwv�Y[uvEf�bB_2� ]��4_�fj_�]gbB}�& C ]`_ 2Zcb0f�� vE] ]gv ��f�b5b0f�]gb��Lf�bBY[u.���0vEbBZcvEf�`Yef���k Yev Y��,dgf�bB} �0|e]*�,kZguA� Y��Mu�]gv)b0f�� ]`_a_�fju���f�� � ]gbM_�]gb0f,v �<Zgu h:( ��]w]`|[fjZgu d�Zcb9Y[Z��<|ef��&;V����6�>`�2� U��LY��)_af�v ��]�� Y��)Z2� ]`_ �<Y[uLZcv0Ye]`u ]��3�0Y�� v0Y[uA�5Zgu�� |[Y[u�fjZcb)vEb9ZguA�$� ]gbB_aZcv0Ye]`uA��&;V����6�>`�

��D:c���2�U���f ;��=��6�>g��_�f�v ��]�� Y��)YevEf�bBZcvEf��4�Luwv0Y[|6u�] � ��b0v ��f�b4Y[_2Lb0]=dgfj_afju vMY ��]��Lv0ZgY[u�f�� &

Page 54: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} ncm

C ]`_a_aZgu��� - � �� � + ���*� �� ��� � � � � � � � ��� � 37� ��� ��� � 6 � � �f� � 4��������97(� � � � 6������ � �8�� �'>=�O�w�

��.>`�

�: ��8�6`�2���o< � � 8���� � 6 =� 6 � � : 8 � � � � �� 6`� � :%8 � � � � � �

C ]`uwvEb0]`|��.v ��f Z��<|[Y���Zcv0Ye]`uKZguA�Kv ��f _�]��LZg|[Y[v0Yef��a]��\q ��}VuLZg_aY �=x5dcZcbBY[Z��<|ef ]gb���f�bBY�u.�.& /F}^uLZg_\Y��]gb���f�bBY�u.� Y��5Z vEf����Lu<Y�1%�Lf.vE] b0f�]gb��Lf�b v �Lf�/ / / d�ZcbBY�Z��<|ef�� vE] bBf��A�A� f�v ��f*�BY���f.]���v ��f�f0 VY��0v0Y[u.�/ /�/ �&�� ��fju�u�] ]�<v0Ye]`uA�GZcb0f��$�f���YA=Lf��Ok�v �Lf����b0b0fjuwv �Ev0Zcv �A�(]�� ��}^u<Zg_aY��;]gb���f�bBY�u.�FY �3�<Y��$<|[Z=}gf�� &i�v�_�]D�0v4]`u�f ]��Gv ��f ]�Lv0Ye]`u�� � 6<k � <kLZguA� � 8*� ��]D�L| ����f(�$�f���YA=<f�� &/F}^uLZg_\Y���]gb���f�bBY[uA� _aZ=} ��f.v0Y[_af*� ]`uA���L_aY[u.��k0���Lv)��Zgu ]�� vEfju�b0f��A�A� f�v ��f �0Y���f�]��4v ��f / / /����bBZg_aZcv0Y ��Zg|[|e}�&7i �g]^]����]`Y[uwv;vE]aY[u dg]��gf ��}VuLZg_aY �M]gb��Lf�bBY[u.� f0 �<|�Y���Yev0|e} q �A�BY[u.� v �Lf � �]�Lv0Y[]`u2xzY��Z�� vEf�bGv ��f � ]`_a_aZguA��� ^�"� ;D8

��':%8�6�;Lk�]`uA� fzv �LfAvEbBZguA�BYev0Ye]`u b0fj|�Zcv0Ye]`u �LZ�� ��f�fju(���LY�|ev&OPRv Y�� �]D� �BY �<|efvE] �0ZjdgfTv ��fF]gb���f�bBY�u.� � ]D�LuA���A�0Y[u.� 5^�2�c��6

�: ��8�6 � Y[u.]gb���f�b;vE]5b0f��A�EfFYev q �A�0Y[u.�)w���D; 8

�� : 8�6�; � �:`��8�6`� � <� ; 6Vx Y�u v ��f(� ��v ��b0f�&

C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� 8

/TY��0Z��<|ef(�L}^uLZg_\Y��F]gb���f�bBY[uA�)� b0]`_ vEb9Y ���gf�bBY[u.�aZ��LvE]`_aZcv0Y���Zg|[|e}�&� 6 �� 6`� � :%8 � ~AuLZ��2|ef ��}^u<Zg_aY��F]gb���f�bBY�u.� vE]\vEbBY ���gf�bMZ���vE]`_\Zcv0Y���Zg|[|e} � ��fju�f�dgf�b4ZI� f�b0v0ZgY[u v ��b0f����VW]`|�� ]`u v ��fz]�dgf�bBZg|[| / / / �BY���f;Y �tb0fjZ�� ��f�� &5 ��'6 � � :%8 ��_)�A�Ev3�"f;]`u�f;]��<v ��f � ]`|[|e]/��Y[u.���

N)I>a G �0- ]=dgf��(fjZ�� ��dcZcbBY[Z��<|efzv ��b0]D�.�D�L]D��v v �Lf;]gb ��f�bGvE]�=2uA� Zgu ]�Lv0Y�_aZg|�"]D�BYev0Ye]`u� ]gbTv �LZcvFdcZcbBY[Z��<|ef�qsZ�� � �L_aY�u.�\Zg|[| ]gv ��f�bFd�ZcbBY�Z��<|ef��FZcb0f.= Vf��2x &FU��LY�� �gfju�f�bBZg|[|e}Z����LY[f�dgf�� �gb0fjZcvEf�b �0Y���f bBf��A�A� v0Ye]`uA��v �<Zgu v ��f��MY�uA��]/��_�f�v �L]��6k�����v)Y����0|[]/�;f�b�&W9K�C �oJ(d � oGZgYeb��.]�� dcZcbBY[Z��2|ef��\Zcb0f bBZgu���]`_a|e} ���L]D�Efju6kTZguA� ���;Z�A�f�� Y[uKv ��f]gb���f�b�&4U ��f �)��Z� Y�� �f�b � ]gb9_�f�� �^} ZI�Ef�bBY[f��4]�� �)��Z���4]�� Z����EZ�� fjuwv�dcZcbBY[Z��2|ef��&U���f �"f��0vM]gb���f�bTZg_�]`u.��v ��]D�Ef ]��Lv0ZgY[uLf����^} v ��f �Ef�bBYef��M]�� �)��Z����Y �4b0f�v0ZgY[uLf�� &U���f,u��L_ �"f�b�]��3<ZgYeb��"� ��]D�Efju � ]gb �)��Z�A<Y�u.� f 1��LZg|��4v ��f,u%�<_ ��f�b�]�� dcZcbBY[Z��2|ef��Y[u v ��f(�<Y[Z��gbBZg_ &W9K�C �oJ(d eDI (J(G �zSVZg_�fFZ�� W9K�C �oJ(d k%����vzv ��fMv\�z] d�Zcb9Y[Z��<|ef��zZcb0f � ��]D�Efju �E] v �<Zcvv ��f.=<b��EvMY��MZ��"]�dgf v �Lf,d�Zcb9Y[Z��<|efb�MY[v � v ��f |�Zcb �gf��EvMu��L_ �"f�bM]�� u�]��Lf���k<ZguA� v ��f�Ef�� ]`uA� Y��"��fj|e]/� v �LZcvMdcZcbBY[Z��<|[f�& PRu���Z��Ef v ��f�bBf Zcb0f �Ef�dgf�b9Zg|OdcZcbBY[Z��<|ef��4v0Yef�� � ]gbv ��f _aZ� �Y[_)�L_ u��L_ ��f�b)]��(u�]���f���k�v ��f ]`uLf ��|e]D�Ef��EvMvE]av ��f b0]^]gvMY������Ef�� &N)I>a G EHJ(C� (M W � M � U���f N)I>a G _�f�v ��]��rY�� YevEf�b9ZcvEf�� �Luwv0Y[|Gu�] � ��bBv ��f�b,Y[_ LbB]=dgfj_�fjuwvY��)]��Lv0ZgY�u�f�� &N)_gdfdfM/G W9_ N�I>a G � U��LY �F_af�v ��]�� Y��TZgu Y�_ <|efj_�fjuwv0Zcv0Ye]`u ]�� �0}^_a_af�vEbBY��)�0Y � v0Y[u.�.&P{v;Y�� �BY[_aY[|[Zcb(vE])�0Y � v0Y[u.��k ��Yev ��]`u�fFZ��A�LYev0Ye]`uO�tX ZcbBY[Z��2|ef�� v �LZcv ��f�� ]`_�f�Z����0Z�� fjuwv�A��bBY�u.�*�BY � v0Y�u.� Zcb0f�vEf��EvEf�� � ]gb �E}V_a_�f�vEbB}�&�PH�;v ��f�} Zcb0f2�E}V_a_�f�vEbBY��cktv ��f�}rZcb0f|[Y[u.�gf��&Y[u Z��gb0]D�. &�S�Y � v0Y�u.� v ��fju � ]`uwv0Y[u���f�� �MYev � Z��gb0]D�. ��fjY[u.��_�]=dgf��OkY[uA�EvEfjZ�� ]��GZ �BY[u.�`|efTdcZcbBY[Z��<|ef�&N)_gdfdfM/G W9_ N�I>a G EHJ(C� (M/W � M � U��Lf N�_=dfd M/G W9_ N)I>a G _�f�v ��]�� Y �FY[vEf�bBZcvEf�� �Luwv0Y[|pu�]� �Lb0v ��f�bMY[_2Lb0]=dgfj_afju v4Y��4]��Lv0ZgY[u�f�� &�#I>C �oJ0� ��� ����� � opf�bB_)��vEf�� v �Lfrd�ZcbBY�Z��<|ef�� �MYev �LY�un�MY�uA��]/� �.]��4+�u0+ Z����0Z�� fjuwvd�Zcb9Y[Z��<|ef���kg� ��f�bBf2+�u0+���Zgu���f�fjYev ��f�b"G^k�l ]gb�,�k.�E] Z��;vE]�_aY[uLY�_aY���f)v ��fF]=dgf�bBZg|�|/ /�/ �0Y���f�&�#I>C �oJ0� ��� ����� EHJ(C� (M W � M �;U���f �#I>C �DJ�� ��� ����� _af�v ��]�� Y �;Y[vEf�bBZcvEf�� �Luwv0Y[|�u�] � ��bEWv ��f�b�Y�_ Lb0]�dgfj_�fju v4Y �)]��Lv0ZgY[u�f�� &� W9J(BDe N)I>a G �4U �LY��4_�f�v �L]�� Y�� �BY[_aY[|[Zcb)vE] N)_gdfdfM*G WH_ N)I>a G k ����v �A�Ef��F_�]gb0f �gfju�Wf�bBZg| � b9YevEf�bBY[Z vE]I� b0fjZcvEf �gb0]D�.���&� W9J(BDe N)I>a G EHJ(C� (M W � M ��U���f � W9J(BDe N)I>a G _af�v ��]�� Y�� YevEf�bBZcvEf�� �Luwv0Y[| u�]4� ��bBv ��f�bY[_ LbB]=dgfj_�fjuwvMY��)]��<v0ZgY[u�f�� &K�CDCDM/K�L>I>C ���zU��LY���_�f�v ��]�� Y��)Zgu Y[_ <|efj_afju v0Zcv0Ye]`u ]��0�0Y[_)�L|[ZcvEf�� ZguLuLfjZg|[Y[u.� � ]gbd�Zcb9Y[Z��<|ef ]gb��Lf�bBY[u.�.&(U��LY �)_�f�v ��]�� Y��"�]gvEfju v0Y�Zg|[|e}\dgf�bB} �B|e]/�(&� M/CDM*G)I�E �rU��LY���_�f�v �L]��KY��aZgu Y�_ <|efj_�fjuwv0Zcv0Ye]`u�]�� Z �gfjuLf�v0Y�� Zg| �g]gbBY[v �L_ � ]gbd�Zcb9Y[Z��<|ef ]gb��Lf�bBY[u.�.&(U��LY �)_�f�v ��]�� Y��"�]gvEfju v0Y�Zg|[|e}\dgf�bB} �B|e]/�(&

Page 55: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} nVh

M�� K(EHG � U��LY��._�f�v ��]�� Y[_2<|efj_�fjuwv �\Z���}VuLZg_aY�� <b0]��gbBZg_a_aY�u.� Z�ALbB]`Z����KvE]f0 VZ�� vpb0f�]gb��Lf�bBY[u.�.&OPRv6]`uL|e} �EvE]gb0f�� Z+/ / / ZcvtZ)v0Y[_af�& U���f�bBf� ]gb0fgkcYevOY��Ob0fj|[Zcv0Yedgfj|e}f9RI��Yefjuwv4Y[u�vEf�bB_2�;]��G_�fj_�]gb0}�& C ]`_2<Zcb0f���vE]�]gv ��f�b)b0f�]gb��Lf�bBY[u.� �EvEbBZcvEf�`Yef��jkLYevY��(dgf�b0}2�B|e]/�,kwZguA�\Y��Au�]gv b0f�� ]`_a_afjuA��f�� � ]gbz_�]gbBf4v �LZgu h:((�"]^]`|efjZgu�dcZcbBY[Z��2|ef��&L>I>CDM/K�W � U �LY���_�f�v ��]��,Y��6Z�� ]`_ �<Y[u<Zcv0Ye]`u ]����0Y � v0Y[u.�)ZguA�,|[Y�u�fjZcb6vEbBZguA�$� ]gbB_aZcv0Y[]`uA�&L>I>CDM/K�W EHJ(C� (M/W � M �4U���f L>I>CFM/K�W _�f�v ��]�� Y �4YevEf�bBZcvEf��4�Lu v0Y�|Ou�]2� ��b0v ��f�b�Y[_ Lb0]�dgf W_�fjuwvMY��)]��Lv0ZgY�u�f�� &

� �� 6`� � :%8 � ?�]gb�� f)��}^u<Zg_aY��T]gb���f�b9Y[u.�5vE]2��f,Y[uwdg]��gf�� Y[_a_af��LY[ZcvEfj|e}�&(U���f dcZg|���f���� ]gbi �� 6`� � :%8 �Zcb0f,v ��f �0Zg_�f Z��4Y�u ]�Lv0Ye]`u � 6A&C ]`_a_aZgu��! � � �.$ ����� $ � $ � � ��� � � ����� ��� � 4���� ��� ���"� ���"�"��� �� 6 � ����� � ��� �����

�V�2���V��A8�8

����A>`�2� � � � �o bBY�u v � v ��f �Ev0Zcv0Y��Ev0Y��� � ]gb v �Lf�/ / / 2Z�� �cZ��gf�& U ��f.Zg_�]D�<u v5]��4Y[u.� ]gbB_aZcv0Y[]`u ��f�fjuA�A� ]`u v ��f

/ /�/ <Z�� �cZ��gf � ]`u =A�D��b9Zcv0Ye]`uaf��Ev0Z��2|[Y�� ��f��.Zcv � ]`_ 2Y[|[Zcv0Ye]`u�v0Y�_�f�& U���f � ]`uB=A�D��b0v0Ye]`uI<ZcbBZg_�f�vEf�b �Zcb0fI<bBY[uwvEf�� ]D��v,vE]^].&*- ]gb0f\Y[u.� ]gbB_aZcv0Y[]`urZ��"]D�Lv(�Ev0Zcv0Y��Ev0Y��� ZguA� <Zcb9Zg_�f�vEf�b�� ��Zgu ��f � ]D�Lu��rY[uv ��f ��]���L_�fjuwv0Zcv0Ye]`u ]��Gv ��f C J / / /Ff���Y��0Ye]`u�/FY�Z��gbBZg_ <Z�����Z��gf�&C ]`_a_aZgu���� $ ����� ! ��������� $ � �, � ! ��� ��� ��� � � �97(� � 37� ��� ��� � 4 ��� � � ��� �����8����� ���� �"���

�=� �"� 4 � � � �o �� � � � � �� 6 � � ����� �=�9��� � 6=��� ��� ��� ������ � �������97(� � � ����� � ��� ����� ��� ��� �X4����� �=����� ��� ���6 ��A8%8

���>`�.>�� 6`�.6`�"� � � � � � � � �

i �<|[Yef��Gv ��f)dcZcbBY[Z��2|ef��(v0Z��<|ef)]��"v ��f\<��2S.- X fju dVYeb0]`uLuLfj_�fju v(vE] v ��f\/ / / <Z�� �cZ��gfgk��E],v ��f ���Ef�b��Zgu �Ef�v��$�f���YA='�c/ / / <ZcbBZg_�f�vEf�b ��vE]�v ��f �`Yedgfju dcZg|���f�& U��LY � � ]`_\_aZguA� �;]gb ���)Y�u*� ]`u��$�Lu�� v0Ye]`u�MYev � v �Lf��V�2�=���

�A8%8

����A>g�"� ZguA�r��6`� � ]`_a_aZgu��A�&

�V�2���V��A8�8

����A>`�2� =Lb��Ev*LbBY�u v ��Z b0f�]gb0v.]�� v ��f�<ZcbBZg_�f�vEf�b � ZguA� �Ev0Zcv0Y��Ev0Y����]�� v ��f ���b0b0fjuwv

� �A� _aZgu<Z��gf�b�&)/;}4�A�0Y�u.�\v ��f � ]`_a_aZgu�� ��6 �2k�v ��f �A�Ef�b _aZ=} _�]��LY � } v ��f dcZg|���f ]��zZguw} ]��zv ��f<ZcbBZg_�f�vEf�b �5]��Mv ��f �LuA�Lf�bB|e}VY[u.��/ / / 2Z�� �cZ��gf�& U���f ��Zj} vE]��L] Y[v Y�� �^} �Ef�vEv0Y[uA� Z dcZg|���f Y[uv ��f�d�ZcbBY�Z��<|ef �IQIQ)�B��>`�.>�� 6`�.6`� �'>��'6 � ��f�bBf �'>g�A>=� 6 ��6 �5�'>=� 6 Y��,v �Lf�uLZg_af\]��4v ��f�<ZcbBZg_�f�vEf�bf0 VZ�� v0|[} Z��"LbBY[uwvEf�� �^}.v ��f �V�2�=���

�A8%8

����A>g�"� � ]`_a_aZguA� &

C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� �

o bBY�u v �)v �Lf)/ / / 2ZcbBZg_�f�vEf�b�Zgu�� �Ev0Zcv0Y��Ev0Y����Z�� vEf�b�v ��f,_�]��LYA=���Zcv0Y[]`u &] ��� - *a8�7B3�701<!"�6%;!670�F3 # �F8?8:%435*�1

U��<Y�� �Ef�� v0Ye]`u ��f�� � bBY��"f��Ov ��fAZ��L_aY�uLY��EvEbBZcv0Y[dgf0� ]`_\_aZguA�A�t]�:"f�b0f�� �^}Fv �LfAY[uwvEf�bBZ�� v0Yedgf ����fj|[|g]���� ������� &C ]`_a_aZgu��� � � �0�2� ����� � �� 6~! Vf����vEf��&Z � �Lfj|[| � ]`_a_aZgu�� & U���f � � �B, , 7(?*3* � �'& Y�� f0 Vf����vEf�� �^} ��Zg|[|[Y[u.� �����#L� � � �

� � �\,h, J(+*�* � ��& &KP ��v �Lf�� ]`_a_aZguA� ��]wf��\u�]gvaf0 �Y��Ev ��]gba}g]D� �LZjdgf u�]gvav ��f b9Y �D� v�vE] f0 ^f���LvEfYev�kLv ��fju Zgu f�b0b0]gbM_af�� �0Z��gf Y���LbBY[uwvEf�� &C ]`_a_aZgu����� � �� � � ��� 4��76���� �� ��������� � � � � ����� � �� 6

>%;�� >�� � � � � �O ��'>=� 6 � �$ L���w�2�=�D< � ���U���f)+�Zg|[Y[Z���+ � ]`_\_aZguA�6k`Y ���`Yedgfju�u�] Zcb �D�L_�fjuwv ��k ��Y[|[|D<bBY[uwv v ��f"��f>=2uLYev0Ye]`u ]��"Zg|[|����b0bBfju v(Zg|[Y[Z��0f��&�TYedgfju Z �0Y�u.�`|ef Zcb �D�L_afju v�k4Yev �MY[|[| Lb9Y[u v�v �Lf4��f>=<u<Yev0Ye]`u�]�� v �LZcv�Zg|[Y[Z�� qsY��TZguw}Lx & �TYedgfjuKv[�;]Zcb �D�L_�fjuwv ��k v ��f �gf�}=�;]gb��� c�'>=� 6�� �"f�� ]`_af�� Zgu Zg|[Y�Z�� � ]gb v ��f � ]`_a_aZguA� �EvEbBY[uA�� L���w�2�=�D< ��kb0f<|[Z���Y�u.�aZgu }�]gv ��f�bFZg|[Y[Z����MY[v � v ��f(�0Zg_�f u<Zg_�f�&C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�

Page 56: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} n�G

� � * �J�i�|�Y[Z��

����� � ���j�C ]`_a_aZgu�� �EvEbBY[uA�

P{v;Y�� �]D� �0Y��<|ef�vE] � b0fjZcvEfTZg|[Y[Z��Ef��Av �LZcv v0Z��gfTZcb �D�L_�fjuwv � �^} �A�0Y[uA� v ��f �LY��0vE]gb0})���.���Ev0Yev �Lv0Ye]`u�_�f�����WZguLY��0_ & Ut] <b0]gvEf�� vav ��f��<Y��EvE]gb0}�� �.���Ev0Y[v ��v0Ye]`u ���LZcb9Z�� vEf�b ��� � � bB]`_$Y[_a_�f��<Y[ZcvEf f0 �<Zgu��0Ye]`u6k;Yev_ ���Ev���f Lb0f�� f���f����w} Z � �o� ��fju fjuwvEf�bBY[u.�av �Lf,Zg|[Y[Z��&?�]gbFf0 VZg_ 2|efg��`�'�������I>�;V� >L� �.6�> 8 + ��6�> 8

��':%8�6�; � � � ! " �B���<� �F��6 � ���%�^���

�:`��8�6`�

�<� ; 6 � ! "t�7: ��8 +

�`�'�������5�.6�> 8 � � :`�^��MY[|[|�� bBfjZcvEf;Zgu Zg|[Y[Z�� � bBfjZ�� �ekcf0 ^f����vEf + b0fjZ�� _�]��Lfj|cW Y � �L]gb0v& �0_ d��D�Ef�vpY[u.��Lv ]gb���f�b =<|ef � �L]gb0v& ]gb��0+�&i�u�� Z��`ZgY[u6��`�'�������I>�;V� >L�)6L� � :�@�+6L� � : � �(�"6L� � : � � ��+�`�'�������26L� � :�@ � >=��� �*"�c�^� � 8�> ��MY[|[| Lb9Y[u v��� �� >���� �*"�c�w� � 8�> � �C i XF~�i(U � C ��b0bBfju v0|e}\v ��f�b0f,Y��)u�]2� ��f�� � vE]2�Ef�f Y �Ov ��f�b0f,Y �)Z ��Yeb���L|[Zcb"��f�fjuA�LfjuA� }\Y[u v ��f,Zg|�Y[Z����f>=<uLY[v0Ye]`u &Gf�& �.&�`�'�������I>�;V� >L� �:%: +6L� � : �V�2�=���

�A8%8

����A>g�"� � �:%: +

� b0fjZcvEf�� Zgu Zg|[Y[Z��#� �LY���� b0f� f�b��MvE] Yev �Efj|��H&4~7 ^f����v0Y�u.�av ��f � ]`_a_aZguA� �:%: �MY[|�|�b0f�� �L|ev�Zgu Y[uB=<uLYevEf|e]^]���A��bBY�u.� � �LY���� v �Lf � ]`_a_aZguA� �V�2�=����A8%8

����A>g�"�+�MY[|[| ��f f0 Vf����vEf�� &

C ]`_a_aZgu����+ ) � � �����0�����/� � � ��� ��� � ��� ��� � �� � �6�� � : � � � � �>`�g<2�+�~ � ��]wf���Yev �4Zcb �D�<_�fju v �MvE]I�Ev0ZguA�<Zcb�� ]D��v$���v&

C ]`_a_aZgu��) ��� ! � � ��� 4��76���� �� � ��� �X� ��� ��� ���"� �� ��c����� � �� 6 �� 6�;�� � � > � � � � ���$ ���:��^� >c�.8 � �PH��Y[uwdg]��gf�� �MYev � u�]MZcb��D�L_�fjuwv ��+��fj| +3LbBY[uwv �6v ��fz|[Y��Ev6]���Zg|[|D� ]`_\_aZguA�A� �Vu�]*�Mu,vE]�v ��f � ]`_a_aZgu��Y[uwvEf�b Lb0f�vEf�b�&)P �(Z�� ]`_\_aZguA� u<Zg_�f Y�� �`Yedgfju6k?��f�v0ZgY[|ef�� Y[u.� ]gbB_aZcv0Ye]`u � ]gb�v �LZcv�� ]`_\_aZguA�T��Y[|[| ��fLb0]�d^Y��Lf�� &C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� �

o b0]�d^Y ��f��MZa|�Y��Ev)]��(Zg|[|OY[uwvEf�bBuLZg| � ]`_\_aZguA�A��kF� ��]D�Ef u<Zg_�f�����f�`Y[u �MY[v � v ��f �Lu���f�bEW� � ]gb0f)���LZcbBZ�� vEf�b5q � � x �w} � ]`uwdgfju v0Ye]`u &

C ]`_a_aZgu��)�� $ ��� - � ������� � ��� 4�� ��� � ����� � �� 6 � �� 6 ��� �0� � � 4 �� � � � 7 ������ �V����: ��� � � � � �O ��^�`�d� �*tY��0v � <b0f�d^Y[]D�A� � ]`_\_aZguA�A�pZguA� v ��fjYebpf�dgfju v u��L_ ��f�b��& U �LY��tY �pZ�J�<MPjiMW |�Y �gf �<Y��EvE]gb0} _af����LZguLY �0_Y[uA�0Y ��fTv ��f)< �"S.- X � ��fj|�| &C ]`_a_aZgu�� ]�Lv0Ye]`uA�j� ����*��

*tY��0v �Av ��fF|[Z��Ev; `u��L_ � f�dgfjuwv �&�*tY �Ev � v ��fF|[Z��Ev�lcm f�dgfjuwv �)Y �U `u��L_ � Y��zu�]gv � "f���Y[=Lf�� &P�Y �EvE]gb0} S��.���Ev0Y[v ��v0Ye]`u6�U���f*�LY��EvE]gb0} � �A���Ev0Yev ��v0Y[]`ur_�f����LZgu<Y��0_ Y��,Z �0Y[_ <|[f�b dgf�b��0Ye]`u ]��)v ��f����� �LY��0vE]gb0} � �.���Ev0Y[v ��v0Ye]`u_�f����<ZguLY��0_ &AP{v)fjuLZ��2|ef��)}g]D� vE].b0f��A�Efb�;]gb��A� � b0]`_ LbBf�d^Ye]D���0|e}av{}%�f���� ]`_\_aZguA�A�&

Page 57: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} ngl

U���f ��f�sZ��L|ev �<Y��EvE]gb0} � �A���Ev0Yev ��v0Y[]`u����<ZcbBZ�� vEf�b Y���v ��f ��� � q � ���TY ���Lf� Z��L|[v � ]gb ����fj|[|Of�����Z�"f��jkOZguA���� �2_\Zcb ���4v ��f(��f�`Y[uLuLY�u.� ]��(Z2� ]`_\_�fju v9x &)U��<Y��"��Zgu ��f(���<Zgu.�gf��4���0Y[u.�5v ��f +�Ef�v�+(� ]`_a_aZgu�� &PRu.v �LY�� ��f�� � bBY�Lv0Ye]`u � � �VY�� �A�Ef���Z��Av ��f��LY��EvE]gbB} ���LZcb�& U ��f ��� ����Zgu Z�A�fjZcb;Zguw}=� ��f�b0f�Y�u\Z |�Y[u�f�&i&|[Y[u�f � ]`u v0ZgY�uLY[u.�,Z(�<Y��EvE]gb0})� �.���Ev0Y[v ��v0Ye]`u5Y��Gf����L]wf��\vE],v ��f � � bBf�fjuaZ�� vEf�bzv ��f � �A���Ev0Yev ��v0Y[]`u v0Z��gf��<|[Z�� f�& ��� � ��Zgu �"f <b0f�� f���f����^} Z � �OY[u ]gb���f�b vE] f�� ��Z��f�v ��f2� �.�'�Ev0Yev ��v0Ye]`uOk � ]gb,f0 �Zg_ <|efgktvE]fju vEf�bTZ ��� �<Y�u vE]aZgu Zg|�Y[Z��)]gb4vE]*�Ef�v)v ��f(LbB]`_ Lv&~AZ�� �\dcZg|[Y��5|[Y[uLf;v{}%�f��aZcvAv ��f�Lb0]`_2Lv(Y�� �0Z=dgf�� &(PH�"v ��f +�LY��EvE]gbB} +;d�ZcbBY�Z��<|ef)Y�� �Ef�vFq �Ef�f ��fj| 2Z��gf� ]gb +�Ef�v�+jx9k^fjZ���� |[Y�u�f4Y��AZg| �E] f�� ��]wf��.vE] v ��f �LY �EvE]gb0}&=<|ef�& � ]D����Zgu �A�0f4v ��f2+�LY��0vE]gb0} +"� ]`_a_aZgu��vE].|[Y �Ev�v ��f Lb0f�dVYe]D�A�0|[}av }��f�� � ]`_a_aZguA���&S��.���0v0Yev ��v0Ye]`uA�j�i�v�Zguw} "]`Y�u v)Y[u Za|�Y[u�fFv ��f��Ef �LY �EvE]gb0} � �.���Ev0Y[v ��v0Ye]`uA�;Zcb0f Z=d�ZgY[|�Z��<|ef�&����� PRu<Yev0Y[Zg| �;]gb�� ]��G|[Z��Ev�� ]`_a_aZgu�� &��� � uVW v � Zcb �D�<_�fju vM]��G|�Z��Ev�� ]`_a_aZguA� &�� *tZ��Ev�Zcb �D�L_�fjuwv4]��(|[Z��Ev�� ]`_a_\ZguA� &�� i�|�|?����v4Y[uLY[v0Y[Zg|h�z]gb�� ]��p|[Z��0v � ]`_a_aZguA� &��� *tZ��Ev � ]`_a_aZguA� &� ������ *tZ��Ev � ]`_a_aZguA� ��f�`Y[u<uLY[u.�k�MYev ��+�Ev �.� +=&� � Q4f�fjZcv4v ��f uVW v � � ]`_a_aZgu�� &� � � Q4f�fjZcv4v ��f uVW v � Lb0f�dVYe]D�A�"� ]`_\_aZguA� & (+, & ��� / Q4f<|�Z�� f4+ ]`|��0+b�MY[v � +�u�f9� + Y[u4Lb0f�dVYe]D�A� � ]`_a_aZguA� &FU bBZgY[|[Y�u.�I�$<Z�� f�� ZcbBf)�0Y��`uLYA=�W

��Zgu v��A��bBY�u.�)���.���Ev0Yev �Lv0Ye]`u &GPRu<Yev0Y[Zg|?�$<Z�� f���Zcb0f,u�]gv �0Y��`uLYA=���Zguwv&C ]`_a_aZgu��! � � �.$ " ��#��� � � �Z�� � � � � � ����� ��� � �� 6 4���� ��� ���"� ���"�"��� �

�V�2���V���6�D> <�6 � � � �o bBY�u v �4ZI� ]gb9_aZcvEvEf����A�<_ ]��0Lb0]�� f�� �E]gbEW � "f���Y[=�� �A�0Z��gf �0v0Zcv0Y��Ev0Y����k"ZguA��/ / / �A�0Z��gf)�Ev0Zcv0Y��Ev0Y ��&

?�]gb6/zf�b��gfj|ef�} J�uLYA "kVv �LY��MY[uA��|��A�Lf��;Zg|�|�]�� v ��f Y[u.� ]gbB_aZcv0Ye]`u Y[u v �Lf�<�6 �w� �6��> <�6 � �(�EvEb��A� v �Lb0f�&C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� �

o bBY�u v �)v �Lf(� ]`_a_aZguA� ���0Z��gf�&C ]`_a_aZgu��� "�� $ � ���o� � � � � �o ��

�g���c� � � � � � � � �S^vE]���)v �Lf(Lb0]��gbBZg_ & /F]wf���u�]gv��0Zjdgf v ��f ���bBb0fju v4uLf�v[�;]gb � �"f� ]gb0f f0 �Yev0Y[u.�.&C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� �

?�b0f�f��,Zg|�| v �Lf ���Ef�� _�fj_�]gb0}4�"f� ]gb0f31%�<YevEv0Y[u.�.&,U��<Y���Y ���B|e]/�;f�bjkOZguA� YevTY�� �A�Ef�� � ]gb=<uA�LY�u.��_�fj_�]gb0} |efjZ����&

C ]`_a_aZgu�������� $ � % ������� � ��� � 3 � ��� � � � ��� � � ���6<��6`� � � � �Q4f��Ef�v �;v ��fX� ��]`|ef �E}��0vEfj_ k^Y�ua]gb���f�bzvE] bBfjZ��.Y[u\Zgu�]gv ��f�b�_�]��Lfj|<ZguA�\vE] �f�b � ]gbB_ dgf�b9YA=���Zcv0Ye]`u\]`uYev&C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� �

o bBY�u v �)v �Lf(� ]`_a_aZguA� ���0Z��gf�&

Page 58: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} n�,

C ]`_a_aZgu���� $ � ����� � ������4*� ���� � �� ��4��������97(� ���6 ��� � � ���$ c�'>=� 6�� � �O g�A>�;���6�� �i�dcZcbBY[Z��<|ef fjuwdVYeb0]`uL_�fjuwv�Y �M_aZgY[uwv0ZgY[u�f�� �w} v ��f)� ]`_a_aZguA� Y[uwvEf�b Lb0f�vEf�b &4U���f +�Ef�v�+ � ]`_a_aZgu���Ef�v �FZadcZcbBY[Z��<|ef vE]�Z <Zcb0v0Y ��L|[Zcb4dcZg|���fgk<Zgu�� v ��f +�LuA�0f�v�+ � ]`_a_\ZguA� b0fj_a]=dgf��Fv ��f ��f>=2uLYev0Ye]`u ]��Z�dcZcbBY[Z��<|ef�&(P � + �Ef�v�+ Y�� �`Yedgfju u�]aZcb �D�L_afju v ��k2Yev"LbBY[uwv ��v ��f(���bBb0fju vMd�Zg|��LfF]��(Zg|[|�dcZcbBY[Z��2|ef��&C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� �

o bBY�u v �)v �Lf(� ]`_a_aZguA� ���0Z��gf�& � � * �J�

X ZcbBY[Z��<|[f,uLZg_�f � � , � �7�

X Zg|���f,vE]I�"f,Z����0Y �`u�f�� vE].v ��f d�Zcb9Y[Z��<|ef�&PRuwvEf�b �]`|[Zcv0Ye]`u ]�� d�ZcbBY�Z��<|ef���Y�� Zg|[|e]/�;f�� � ��fju �A�BY[u.� v �Lf��0f�v � ]`_\_aZguA� &U ��f dcZcbBY[Z��2|ef�� Zcb0fb0f� f�b0b0f�� vE] ��Yev � v ��f)Lb0f>=B ]�� ��� � & S^]I� ]gbTf0 VZg_ 2|efgk-� �LZcv � ]`|[|e]*� � ��Zgu ��f �L]`u�f vE] ���Lf�� � v ��fd�Zg| ��f ]��(Z2�Ef�v4dcZcbBY[Z��<|[fg�� ������������6`� �:%: �>`��`�'�������26L� � : � �:%:�>`�U���f,|[Z��0vM|[Y[u�f�+ �<Zcb�++�MY[|[|'��f v ��f,]D��v$��Lv"Lb0]��A�A� f��*�w} <��2S.- X &X ZcbBY[Z��<|[f�� ��Zgu*��f4f0 VvEfjuA��f��*�w}2���0Y[u.�,v �Lf ���<ZcbBZ�� vEf�b �e���(vE])� ]`u���ZcvEfjuLZcvEf d�Zg| ��f��&!?�]gb�f0 VZg_2<|efg�� ������������6`� �:%: �>`��`�'������� ��6`� �:%: � �:%: ! �:�: '>`��`�'�������26L� � : � �:%:�>`� ! �:%: '>g�U���f dcZcbBY[Z��2|ef �:�: Y ��f0 ^vEfjuA�Lf��T�MYev � v �Lf d�Zg|��Lf �:�: '>`��&� �<YevEf��$<Z�� f � �LZcbBZ�� vEf�b��;_aZ=} ��f"Lb0f��0fju v �MY[v �LY[u31%�L]gvEf��& PM]*�zf�dgf�bjkVdcZcbBY[Z��<|[f�Y�u vEf�b �]`|[Zcv0Y[]`u |�Zj}��v ��f�b0f��EvEb9Y�� v0Ye]`u v �LZcvTv ��f ���LZcb9Z�� vEf�b����e���TZguA� � � �O_aZj} u�]gv ��f)���Ef��c�MYev �LY�u�1���]gvEf��& U �LY��FY��FvE]Zg|[|e]*� � ]gbMb0f����b��0Y[dgf,Y[u vEf�b�"]`|�Zcv0Ye]`u &AS^]2� ]gb4f0 �Zg_ <|efgk�v ��f � ]`|[|[]/�MY[uA� Y��MZg|[|e]/�;f��� ������������6`� + �:�:�'>g� +�� � �^��`�'�������26L� � : � + �:�:�'>g� +� � �V�U���f,|�Z��Ev4|[Y[u�f+�MY�|[|���f v ��f ]D��v$���v"LbB]��A��� f����^} < �"S.- X)&/ ��v)Y[u\v �Lf�� ]`|[|e]*�MY[u.��kwv ��fTd�Zg| ��f�]��tv ��fTd�ZcbBY�Z��<|ef �:�:�# '>g�A�MY[|�|<u�]gv ��fFY�u vEf�b <b0f�vEf���� ]gbBb0f�� v0|e}"��`�'������� ��6`� + �:�:�# '>g� +4� � �V��`�'�������26L� � : � + �:�:�# '>g� +�:�:�#�'>g�P �pZ5dcZcbBY[Z��<|[f,Y��)u�]gv �Ef�v �w}�v ��f +�Ef�v�+(� ]`_a_aZguA�6k�v �Lfju v ��f,dcZcbBY[Z��<|[fTY ��b0f�v ��bBu�f����LuA���<Zgu.�gf�� &/TY�:"f�bBfju v � ]`_\_aZguA�A� �A�Ef�fjuwd^YebB]`uL_�fjuwv,Y[u.� ]gbB_aZcv0Ye]`u�� ]gb �LY�:�f�b0fjuwv(���b�"]D�0f��&�U���f2� ]`_a_aZgu��Y[uwvEf�b Lb0f�vEf�bM_\Z��gf�� �A�Ef ]�� v ��f � ]`|[|[]/�MY[uA�)2ZcbBZg_�f�vEf�b����K�BDG)J=M �gM�E

/Ff>=<u�f���Z � ]`_\_aZguA�*�EvEbBY[u.� vE])��fMZ��LvE]`_aZcv0Y���Zg|[|e}\f0 ^f����vEf�� Z�� vEf�b�f�dgf�b0}I� ]`_a_aZgu��Lb0]�� f�� �Ef�� �w} v ��fI� ]`_a_\ZguA� Y[uwvEf�b LbBf�vEf�b�&\U��LY � Y��(�A�Ef� �L|0� ]gb v �LY�u.�D� |[Y �gf�v0Y[_\Y[u.�� ]`_a_aZguA����kL]gb4vEbBZ���Y�u.��v ��f(LbB]��gb0f�� �)]��G]�Lv0Y[_\Y��jZcv0Ye]`u &

J(e M/C eDK�G)Y+ ]��fju <Zcv �0+�qsY[u ZguLZg|e]��g}�vE]�v ��f � ��fj|[| W dcZcbBY[Z��2|efKo i(U#P x Y���Z�|[Y��Ev ]�� � ]`|[]`uVW�Ef<ZcbBZcvEf�� �EvEbBY[uA�D� �`Yed^Y�u.�*�<Yeb0f�� vE]gbBYef��TvE]��"f �EfjZcb ����f�� � ��fju�f�dgf�b,Z =2|ef�Y��T]��fju�f��� ]gb�b0fjZ�� &�UA}�<Y���Zg|�|e}.v �Lf ���b0b0fjuwv �LY[b0f�� vE]gb0} q & xaY �)v ��f.=<b��Ev4YevEfj_�Y[u v �LY��M|[Y��Ev&AU ��f�Ev0ZguA�LZcb � �E}��EvEfj_ |[Y �<bBZcb0} q v{}%<Y ��Zg|[|e}���< �2SA- X *tP /�Qci�Q � o i(U#P x�Y��4Zg|��;Z=}���Y[_5W<|[Y���Y[v0|e}aZ�A�fjuA��f��.vE]�v ��f(���b0bBfju v <Zcv � & U �LY�� Lb0]=dVY���f���Z � ]`uwdgfjuLYefjuwv�� ��]gb0v W �<ZguA�_�f����<ZguLY��0_ � ]gb4b0fjZ�� �LY[u.���Ev0ZguA�LZcb�� |�Y �LbBZcb0} =<|ef��&

Page 59: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} ngn

C=B-N)d� N)G �oM WHWS^v0ZguA�LZcb � f�bBb0]gb qsu�]gbB_aZg|[|[} �Ev ��f�b0b x ��Zgu ��f\b0f W �<Yeb0f�� vEf�� vE] Z�=2|ef��^} �Ef�vEv0Y�u.� v ��fd�Zcb9Y[Z��<|ef,u��A�0_ d �Ev ��f�b0b &C=B-N)d� N)G �oJ(BDGS^v0ZguA�LZcb � ]D��v$���v qsuL]gbB_aZg|[|e}*�Ev ��]D��v9x"��Zgu ��f b0f W �LYebBf�� vEf�� vE]\Z�=<|[f �w} �Ef�vEv0Y[u.�\v ��fd�Zcb9Y[Z��<|ef,u��A�0_ d �Ev ��]D��v&

C ]`_a_aZgu���� " � + � � � ���/����� ��� ����� � � �� ��� ���7����� � �� 6 � � ����� � �-� ���:g���<�D6 � � � � � � � � � � � � � � ��� L� ;%6�� �$ �>g� <2�+� �Q4fjZ��A��ZguA� f0 Vf����vEf�� � ]`_\_aZguA�A�"� b0]`_ Z =<|ef�&C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� �

o bBY�u v �4Z <b0]`_ Lv"��f� ]gb0f b0fjZ��LY[uA� fjZ�� �4� ]`_\_aZguA� &� �

SVY[|efjuwv0|e}�Y �`u�]gb0f��4Zgu ZcvEvEfj_ Lv4vE]af0 Vf����vEf)� ]`_a_aZguA�A��� b0]`_ Zau�]`u�f0 �Y��EvEfjuwv;=<|ef�&���

~ � ��]wf��MfjZ���� � ]`_a_aZguA� �"f� ]gb0f,Yev4Y ��f0 ^f����vEf�� & 5,��7�

?GY[|ef,uLZg_�fiMb��D�L_�fjuwv � ]`u v ��f�� ]`_\_aZguA� |[Y[u�faZ�� vEf�b5v ��f =<|[fjuLZg_�f\Zcb0f.b0fj_�fj_ ��f�b0f�� ���Lv u�]gv f�d�Zg|��<ZcvEf�� &C ]`_a_aZgu��A��Y[u�v ��f � � bBY Lv�=<|ef ��Zgu v ��fju�b0f� f�b)vE]�v ��f��Ef Zcb �D�<_�fju v � �A�0Y[u.� v ��f(�LY��0vE]gb0}I� �.�'�Ev0Yev �VWv0Ye]`u _�f�� �LZguLY��B_ &~7i6i�- o�* ~4�C ]`uwvEfju v ��]�� vEf��0v& � � bj��.6�> 8

�� : 8�6�; � � � !$@

�;�>`�w�.6c��� �D6`�A>`�<� � �

w��� ;D8��A>`�<� >�';%6L�

w��� ;D8�� :%8�6�;��:��.�w����6��>���� ��6L�^�

UA}�<Y[uA��+ �E]D�Lb�� f vEf��Ev& � � b�� ��]gb0v& �0_ d +F]`u v ��f(� ]`_a_aZguA� |[Y[u�f+�MY[|�|2f0 Vf����vEf v ��f(�Ef 1���fjuA� f�.6�> 8

�� : 8�6�; � � � � :`�^���B���L�

�;�>`�w�.6c��� �D6`�A>`�<� � �

w��� ;D8��A>`�<� >�';%6L�

w��� ;D8�� :%8�6�;��:��.�w����6��>���� ��6L�^�

q PRu v �LY�� ��Z��Ef � ! &4�gf�v �4+ �E]D�Lb�� f�+�k � ! "*�gf�v �4+ vEf��Ev& � � b�+ck(ZguA� � !$@��gf�v � + � �L]gb0v& �0_ d +�& x P �)}g]D�v }��f + Zg|�Y[Z��"�Ev �E]D�Lb�� f vEf��Ev& � � b�+ Zgu�� v ��fju v }��f +�Ev�� ��]gb0v& �B_ d ��]���]?+�k�}g]D���MY[|[|"f0 Vf����vEf�.6�> 8

�� : 8�6�; � � A: � :

�;�>`�w�.6c��� �D6`�A>`�<� � �

w��� ;D8��A>`�<� >�';%6L�

w��� ;D8�� :%8�6�;��:��.�w����6��>���� ��6L�^�

��f���Z��A�Ef + �"]���]?+ �;Z�� v ��f��Ef�� ]`uA�aZcb��D�L_�fjuwv(]`u5v ��f4|[Z��Ev � ]`_a_\ZguA��|[Y[u�f;v }��f�� &pPRu5]gv ��f�b �z]gb�����k

Page 60: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} nV(

� ]`_a_aZguA��� �.���0v0Yev ��v0Ye]`u Y[u�Z(� � b9Y Lv#=<|ef���f�fjuA��� ]`uI��]/� v �Lf � � bBY <vK=2|ef�;Z��zY[u dg]��gf�� &zSg�MYev � ��f��<Z�� �Ef�� vE] Z � ]`_a_aZgu�� Zcb0faZg|��E] � ]D�<u vEf�� Z�� �]D�0Yev0Ye]`uLZg|3<Zcb9Zg_�f�vEf�b��&\U ��f�b0f� ]gb0fgktY �z}g]D� v }��f+ �0v)W ����]gb0v& �0_ d �"]���]?+ck�}g]D�T��Y[|[|"f0 ^f���LvEf�.6�> 8

�� : 8�6�; � � � � :`�^���B���L�

�;�>`�w�.6c��� �D6`�A>`�<� � �

w��� ;D8��A>`�<� >�';%6L�

w��� ;D8�� :%8�6�;��:��.�w����6��>���� ��6L�^�

Ut] 2Z�� ��v ��f*+9W 3+����MYev ��� q ]gb4Zguw}�]gv ��f�b��)�MYev � �2xAvE]�+ �0]D��b�� f�+X� ��fju�v ��f � � bBY Lv �A�Ef�� �]D�0Y[v0Ye]`uLZg|<ZcbBZg_�f�vEf�b ��kL}g]D� _\Zj} ��f>=<u�f,Zgu Zg|[Y[Z��&7?�]gbFY[uA�Ev0Zgu�� fgk0+ Zg|[Y�Z����Eb�� �E]D��b�� fTW 3+�&

C ]`_a_aZgu��$�� ��� � � � � 4��76���� � ��� � � � �3!-��� �0��� � ��� 6 �"� � � 4 ��� � ��<�j� 6 � � � �o bBY�u v �)v �Lf(Lb0]�� f�� �E]gb4v0Y�_�f(�A�Ef�� �BY[uA� f v ��f,|[Z��0vMY[uwdg]���Zcv0Ye]`u ]��pv �Lf + v0Y�_�f�+�� ]`_a_\ZguA�6k<ZguA� v ��fvE]gv0Zg| <b0]�� f����E]gb4v0Y[_�f(���Ef�� �0Y[uA� f)<��2S.- X �;Z�� �Ev0Zcb0vEf�� &C ]`_a_aZgu��"�� �� � � � % � � � 4 ��� ��� � 6�� � D� �"� �� ��� ������2����� ��w�'>�;V� >�� � � � � �>%;��D>L� � �'>=� 6<�+�Q4fj_�]�dgf��Fv ��f(��f>=<uLY[v0Ye]`u�]��GZgu Zg|[Y[Z��"�$�f���YA=Lf�� dVY[Z5v ��f Zg|[Y[Z��"� ]`_a_aZgu�� &

C ]`_a_aZgu�� ]�Lv0Ye]`uA�j� � , � � � � � � * ���Y�

i�|�Y[Z��Ef��)vE]2��f b0fj_a]=dgf��C ]`_a_aZgu��"�� �� $ � � ������ � �� ���4������ � �� ��4 ���Z���97(� ��w�6��6`� � � � � `�.>`�<� > �;%6L�)�

i�dcZcbBY[Z��<|ef fjuwdVYeb0]`uL_�fjuwv�Y �M_aZgY[uwv0ZgY[u�f�� �w} v ��f)� ]`_a_aZguA� Y[uwvEf�b Lb0f�vEf�b &4U���f +�Ef�v�+ � ]`_a_aZgu���Ef�v �FZadcZcbBY[Z��<|ef vE]�Z <Zcb0v0Y ��L|[Zcb4dcZg|���fgk<Zgu�� v ��f +�LuA�0f�v�+ � ]`_a_\ZguA� b0fj_a]=dgf��Fv ��f ��f>=2uLYev0Ye]`u ]��Z�dcZcbBY[Z��<|ef�&C ]`_a_aZgu�� ]�Lv0Ye]`uA�j�� �

o bBY�u v �)v �Lf(� ]`_a_aZguA� ���0Z��gf�& � � � � � �\,����Y� X ZcbBY[Z��<|[f��)vE]2��f(�LuA�Ef�v

C ]`_a_aZgu��" ������ � � � � 4��76���� � 6 � � � ��� � ��� ������� ��� ���"� ���"�"������D> <�6 � � � �o bBY�u v � Z � ]gbB_\ZcvEvEf�� �A�L_ ]���Lb0]�� f�� �E]gbEW � "f���Y[=��I�A�BZ��gf �0v0Zcv0Y��Ev0Y���& ?�]gb /;f�b �gfj|[f�} JFuLY �kpv �<Y��Y[uA��|�����f���Zg|[|6]��pv ��f Y[u.� ]gbB_aZcv0Y[]`u Y[u v ��f �gf�vEb��A�BZ��gf q x��EvEb �A� v ��b0f�&C ]`_a_aZgu��1 )�� + ) � � ��� ��� � � � � �F� �'������� � 6 + �F� � � � � +

5 � �^� � � � � � L� ; 6 � ��>��'6 �*O]^]���� � ]gb)Z.=2|ef�Y[u�Z �Ef�v;]�� �LYebBf�� vE]gbBYef�� � �LY�� �.Y[u���|��A��f��Av ��f���Lb0b0fjuwv �LY[b0f�� vE]gb0}\Z�� �;fj|[|2Z��;v ��]D�0fY[u v ��f < �2SA- X 2Zcv � & P �MYevf=<uA���,v ��f �$�f���YA=Lf�� =<|efgk Yev b0f�]gb0v � v ��f*� ]D�Lu�� =<|[f�� � 2Zcv � & U ��f�EfjZcb�� �LY[u.�22Zcv � Y��"�$�f���YA=Lf�� v �Lb0]D�.�D� v ��f +c��6`� :���6c�

���>`� � + � ]`_a_\ZguA� Y[u�+6���^�6� �<�w�2� +=&

C ]`_a_aZgu�� ]�Lv0Ye]`uA�j� 5,�� � � * �J�

?GY[|ef vE]2��f(�EfjZcb�� ��f��

Page 61: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�b\,��AQ �Lu<uLY[u.�)�`�'������Y[u vEf�b9Z�� v0Yedgfj|e} nNO

] � o C ! l5�A� > 3T' 70�6��3�8?�A3F! � %)�O70%4��/B� 1U��Lf ��f��LZ=d^Y[]gb ]�� v ��f �E}��EvEfj_ ��f�fjuA���\]`u�v �Lf dcZg|���f ]��)�E]`_�frfjuwd^YebB]`uL_�fjuwv�dcZcbBY[Z��2|ef��&n?�]gbY[uA�Ev0Zgu�� fgkOZgu fjuwdVYeb0]`uL_�fjuwvFd�ZcbBY�Z��<|ef �$�f���YA=Lf���v ��f <Zcb0v0Yev0Ye]`u<Y[u.�\_�f�v �L]�� vE] ��f)�A�0f�� Y�u����<Y[|��LY[uA��v ��fvEbBZguA�0Y[v0Ye]`u b0fj|[Zcv0Ye]`u & U���f dcZg|���fT]�� fjuwdVYeb0]`uL_�fjuwv)dcZcbBY[Z��<|ef��"��Zgu �"f,Y�uA�$�f�� vEf�� ZguA� _�]��LYA=Lf�� �MY[v � v ��f

� ��6 ���A� ]`_a_aZguA� &z~Auwd^YebB]`uL_�fjuwv;dcZcbBY[Z��2|ef��"��Zgu ��f fjYev ��f�b�|e]��`Y���Zg|�]gb �Lv0Y[|[Yev{}�&~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef� "%$ �.������+

/Ff>=<u�f��,Z � ]`_a_aZgu�� �EvEbBY[u.� vE] ��f5Z���vE]`_aZcv0Y���Zg|[|[} f0 Vf����vEf�� Z�� vEf�b f�dgf�b0}�� ]`_a_aZguA��LbB]�� f�� �0f���w} v ��f � ]`_a_aZguA��Y[uwvEf�b Lb0f�vEf�b & U��<Y�� _aZ=} ��f����Ef� �<| � ]gb v0Y�_aY[u.� � ]`_a_aZguA�A�jk(]gb vEb9Z���Y[u.� v ��fLb0]��gb0f����4]��p]�Lv0Y[_aY��jZcv0Y[]`u &

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef& � ��+ ~AuLZ��2|ef��\=2|ef � ]`_ 2|ef�v0Ye]`u Z.|�Z +�� �0+�&�P � v ��f �E}��EvEfj_ �LZ����"f�fju � ]`_ <Y�|ef��T�MY[v � v ��f4+ b0fjZ��L|[Y[uLf�+|[Y �Lb9Zcb0}gkcv ��f��A�Ef�b Y��GZ��<|[f;vE] �f�b � ]gbB_ =<|ef � ]`_ <|[f�v0Ye]`u �w} v }�<Y[u.�Tv ��f ^ a � � b �gf�} qsY�u Z+��Zj} �0Y�_aY[|[ZcbvE]\v ��f =<|ef(� ]`_ 2|ef�v0Ye]`u Y[u��0Y���fTv ��f + �<Z�� � + � �Lfj|[| x & P �Gv ��f �E}��EvEfj_ �<Z��Mu�]gv���f�fju4� ]`_ <Y[|ef�� ��Yev �v ��f + b0fjZ��L|[Y�u�f�+�|[Y��LbBZcb0}gkAZ ���LY[|ev W Y�u _�f�v �L]�� vE] "f�b�� ]gbB_@=<|ef � ]`_ <|ef�v0Y[]`u Z |[Z +�� �0+ ��Zgu ��f�A�Ef�� & U �LY���_�f�v ��]�� Y��;fjuLZ��<|ef�� �MY[v � v ��f � ��6 � L� ;%6�� �.� ]`_a_aZguA� & U ��f*+ �� � +\=<|ef � ]`_ <|[f�v0Ye]`u_�f�v ��]�� ��Zgu ��f Zg|��0] fjuLZ��<|[f�� Y �Tv ��f + b0fjZ��<|[Y[u�f�+ |[Y �Lb9Zcb0} �LZ�����f�fju �A�0f�� &�PRuKv �LY�����Z��Ef v ��f� fjZcv �Lb0f��4]�:�f�b0f�� �^}�b0fjZ��L|[Y[uLf ��Y[|[| ��f �<Y��0Z��<|ef�� &

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef ) ��� � + ) �*�� � 6�;%;�� � >g� �$�f���YA=<f�� Z � �LZcbBZ�� vEf�b.vE] ��f ���Ef���Z��2� ��fj|[|;f�� ��Z��f�& U���f ��f�sZ��L|ev dcZg|���f ]���v �<Y��fju dVYeb0]`u<_�fju v)dcZcbBY[Z��2|ef,Y�� � ��� &

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef)�� $ ��� - + ) �*�� �V����: ���

�� � >g� �$�f���YA=<f��zZ � �LZcbBZ�� vEf�b4vE] ��f �A�Ef�� Y[u �LY��EvE]gbB}2� �.���Ev0Y[v ��v0Ye]`uA�&GU���f ��f�sZ��L|ev;d�Zg| ��f]��Gv �LY���fjuwd^YebB]`uL_�fjuwv)d�ZcbBY�Z��<|ef Y�� ��� � &

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef� ! � � ! � $�):���6g�

���>`� � qsY[u5ZguLZg|e]��g} vE],v ��f�� �Lfj|[| W dcZcbBY[Z��<|ef �UCIG � xtY��(Z |[Y��0v ]��?� ]`|e]`uVW �Ef2ZcbBZcvEf��I�EvEb9Y[u.�D�3�`YedVY[u.�

�LYeb0f�� vE]gb9Yef��6vE]���f �EfjZcb�� ��f���� ��fju�f�dgf�btZ�=<|[f Y���]��fju�f�� � ]gbOb0fjZ�� &pUA}�<Y���Zg|[|[}Mv ��f ���bBb0fju v �<Yeb0f�� vE]gb0}q � ��� x Y � =<b��Ev Y�u v �<Y�� |�Y��Ev&rU���f �Ev0ZguA�LZcb ���0}��EvEfj_ |[Y��LbBZcb0} q � ��������ZLD �IHJCgH � � �UCIG � x�Y�� Zg|>�;Z=}��Y[_ <|�Y���Yev0|e}4Z�A�fjuA�Lf��TvE]Mv ��f ��Lb0b0fjuwv <Zcv � & U �LY��?Lb0]�d^Y ��f��OZ�� ]`uwdgfjuLYefjuwv � �L]gb0v W �LZguA�,_af����LZguLY �0_

� ]gb�b0fjZ����<Y[u.�2�Ev0ZguA�<Zcb�� |[Y �<bBZcb0}�=<|ef���&~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef��" (�2� $ �%�����S^v0ZguA�LZcb �&f�b0b0]gb qsu�]gbB_\Zg|[|e} ����8�6 �w�Lx2��Zgu ��f b0f W �LY[b0f�� vEf��&vE] Z =<|ef��^} �Ef�vEv0Y[uA� v ��f d�ZcbBY�Z��<|ef�w�6���L�

�����8�6 �w� &

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef��" (�2� $ �%� "%$S^v0ZguA�LZcb � ]D�Lv$���v qsu�]gbB_aZg|�|e} ����8�:c���Lx ��Zgu ��f�b0f W �LYeb0f�� vEf���vE]rZ�=<|[f��^} �Ef�vEv0Y�u.� v ��f Y[u vEf�b9uLZg|d�Zcb9Y[Z��<|efF�^�����<������8�:c���'&

~zu dVYeb0]`uL_afju v�X ZcbBY[Z��2|ef��" (�2� $ � � �S^v0ZguA�LZcb � Y[u.'��v qsu�]gbB_aZg|[|[} ����8<���<x ��Zgu ��f b0f W �LYebBf�� vEf��,vE]�Z\=<|ef �^} �Ef�vEv0Y[u.�Mv ��fzY[uwvEf�bBuLZg|`d�ZcbBY�Z��<|ef�w�6���L������8L���?&

Page 62: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�bFn^�AQ �Lu<uLY[u.�)�`�'�������<Zcv ��� ngi

� � ������%��� ������� � � �����

� �Lfju v ��f � �=��� ]�Lv0Ye]`u Y��5u�]gv2�$�f���YA=Lf��6k �`�'����� b��<uA�5Z��aZ��<Zcv ��� Lb0]��gbBZg_ k�Y[u v ��f �Ev{}^|[f ]�� �����"k�f�b � ]gb9_aY[u.� q �E]`_�f ]��9x;v ��f(�EvEf�� ��f�� � bBY��"f�� Y[u <b0f�d^Y[]D�A�"�Ef�� v0Ye]`u Y�u Z�= Vf�� �Ef 1���fjuA� f�&

���"���.6����V�.:��.��� � �`�'����� �E�D:��w�?>��A8 ;V����6 :����<�D:g��� � � � �� � ��|, � ^ _�`�a b

U���f Lb0]��gb9Zg_ ��f�� � bBY ��f�� Y[u � ��� � � |, � Y��)Lb0]�� f�� �Ef��6kAZgu�� v �Lf � ]gb0b0f��$�]`uA�LY�u.��=<u<YevEf*�0v0ZcvEf _aZ����LY�u�fY������LY[|[v&FU��Lfju6k6Y � � � �� � � 5,��2� ]`u v0ZgY[u�� � ]gbB_)�L|[Z���vE] dgf�bBY � }gk�v ��fjYebTvEb���v � Y[u v ��f �$�f���YA=Lf�� �EvEb���� v ��b0f5Y��f�d�Zg| �LZcvEf�� &�?�]gbFfjZ������ ]gb9_ �L|�Z3� �LY�� � Y��)u�]gv4vEb��Lf,Z2� ]D�LuwvEf�b0f0 VZg_2<|ef Y�� <bBY[uwvEf�� &U���f �<Zcv � � _�]���f(��Zgu��"f(� ]`uwvEb0]`|[|[f��S�MYev � v ��f � ]`|[|e]*�MY[u.� � ]`_a_\ZguA� |[Y[uLfF]�<v0Ye]`uA���

�`�'����� � � � � � � �c�w��� � � ;�� � � � � � & � � � � � ��,� � � � �%� � � � �V� � � � �^� � � � � ;L� �� � �^�� � � ��� � � �� � � ���V��� � � � � � � 6�;=� � � � � � � |,�� � � � :�(� |, � �� � CUE�� � � ; :�>D8 � � � ��� 5,�� � � � �.6%: ��8�6 ��� � � 8��`�'>��6�^� � � � � * � �� ( &����� � � :c��: � ��� � � � �.6L� � � ��� � � � � � � ��� � � � �=5�;�� � � ����� � � �D:���� � ��:�> L������� ��� � � �=5A;L��� ��V�.6%: ��8�6 ��� � � `�O�� � � `�O� � ;%6c�D< � � ���� � :�c� W* |,�� � � � : � �B* 5,�� � � � ��� � � |, � �

� ��f�b0fMv ��f4_�fjZguLY[uA� ]��"v �Lf4]�Lv0Ye]`uA�AY�� ��f�� � bBY��"f�� ��fj|e]*�(&pPH� � ��� � � |, �FY�� uL]gv Lb0]=dVY���f��\Y[u �<Zcv ���._�]���fgkv ��fju v �Lf,_�]��Lfj|6Y��)b0fjZ�� � b0]`_ �0v0ZguA�LZcb�� Y[uA���v&� � iMdg]`Y �A��vE]�|e]`Z���v ��f �`�'�����2� ]`_a_aZgu��A� � ]`u v0ZgY[uLf�� Y[u � 9�#A���^�����<�w�2��� ]gb4Y[u � � �^�����L�^�2���w]gbY[u � ��� D� ������� � ZLD �gH CgH � � �JCIG � �%#��'>L����6 �;� � �6� �<� �2� � &� �c�^� C ��f������ � ��f�v ��f�b4v �Lf vEbBZguA�0Yev0Y[]`u b0fj|[Zcv0Ye]`u Y ��vE]gv0Zg| &� ;�� *tY��0v �4Zg|[|?Lb0]��f�b0v0Y[f��)Y[u S.- XD_�]���fj|� � � & � S��f���YA=Lf��� �<Y���� LbB]�"f�bBv }�]�� SA- X _�]���fj| � ��]D�L| ����f(� ��f�� �gf��� � � � � �J( � ���{, �����B,~AuLZ��2|ef�� Lb9Y[u v0Y�u.�T]��OZ��A�LYev0Ye]`u<Zg|LY[u.� ]gbB_aZcv0Ye]`ua]`uav ��fFY[u vEf�b9uLZg|L]��f�bBZcv0Ye]`u�� ]��?�`�'����� &(SVf�v Wv0Y[u.� � � � �J( � ���{, �����B,�vE]+"��`Yedgf��;v ��f �2Z��0Y��MY�u.� ]gb9_aZcv0Ye]`u &0J �BY[u.�,v �LY �A]�Lv0Y[]`u._aZ��gf��;}g]D�*� f�fj|

��f�vEvEf�bjk �BY[uA� f ]gv ��f�b���Y��Ef,v ��f Lb0]��gbBZg_ LbBY[uwv �4u�]gv �<Y[u.�I�Luwv0Y[|6Yev\=<uLY�� �Lf���kLZguA� v �Lf�b0f Y��Mu�]f�d^Y ��fjuA� f v �LZcv�Yev5Y�� �L]`Y[u.� Zgu }^v �LY[u.� Zcv�Zg|[| & S^f�vEv0Y[uA� v ��f � � � �J( � ���{, �����B, �<Y �D��f�b v �LZgu�hfjuLZ��<|ef���LbBY[uwv0Y[u.� ]��(_ �A� � f0 VvEbBZaY[u.� ]gbB_aZcv0Y[]`u &� � ��� Q �Lu��"Lb0fLbB]�� f�� �0]gb)]`u S.- X =2|ef��� �V� /F]wf���u�]gv ���Lf�� � SVoz~ C� �^� /F]wf���u�]gv ���Lf�� � C j - o JFU4~� � ;L� /F]wf���u�]gv ���Lf�� ��*VU+*pS�oA~ C� �^� /F]wf���u�]gv ���Lf�� � P <MX#i�QTSVoA~ C� � o bBY�u v �Fv ��f�u��L_ ��f�bT]��AbBfjZ����LZ��<|[f �0v0ZcvEf�� ��f� ]gb0f f0 �Yev0Y[u.�.&,P � v ��f � ]�Lv0Ye]`urY ��u�]gv �A�0f��6kv ��f �Ef�vM]��pbBfjZ����LZ��<|[f(�Ev0ZcvEf���Y �"� ]`_ ���vEf�� &� C ]`_ ��LvEf��)v ��f �Ef�vM]�� b0fjZ�� �LZ��<|ef �Ev0ZcvEf�� ��f� ]gb0f f�dcZg|��LZcv0Y[u.� C U+*rf0 �Lb0f�� �0Y[]`uA�&� ����� S^v0Zcb0v ��Y[u vEf�b9Z�� v0Yedgf � ��fj|�| &� � 6�;=�� � o bBY�u v �)v �Lf(� ]`_a_aZguA� |�Y[u�f ��fj| &� � � � |,�� Q4fjZ��A�Mv ��f,dcZcbBY[Z��<|[fF]gb ��f�bBY[u.� � b0]`_ =<|[f � � |, � &� : ( � 5,�� Q4fjZ��A�Mv ��f,dcZcbBY[Z��<|[fF]gb ��f�bBY[u.� � b0]`_ =<|[f (� |, � &� CUE X(f�bBYA=Lf��5]`u<|e} i � � ]gbB_)�L|[Z��)�A�0Y[u.� Zgu Z�� ��]���Zg|��g]gbBYev �L_Nq �Ef�f ��]���L_�fjuwv0Zcv0Ye]`u � ]gb�v ��f

> <�:c�'; �

���6�>g�2� � fju dVYeb0]`uL_afju v)dcZcbBY[Z��<|[f�x &

Page 63: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C �LZ�LvEf�bFn^�AQ �Lu<uLY[u.�)�`�'�������<Zcv ��� n�F

� ;%:�>D8 \* & ��|,��PRuwvEf�b LbBf�v ��� �������*� ]`_a_aZguA���"� bB]`_ =<|ef�\* & ��|, � &

� �.6�:`��8�6 � ~AuLZ��2|ef��)dcZcbBY[Z��<|efTb0f�]gb ��f�bBY[u.��Z�� vEf�b �LZ=d^Y�u.�2����f����gf�� Zg|�|�v ��f �$�f���YA=���Zcv0Y[]`u Y � Zguw}�&� 8�� ��>��6�^� ~AuLZ��2|ef�����}VuLZg_aY��Fb0f�]gb ��f�bBY[u.�5]��pd�Zcb9Y[Z��<|ef��� � * � ���(�& J �0f��}*�� ���( &3� ��fju d�ZcbBY�Z��<|efA]gb ��f�bBY[u.�FY��pfjuLZ��<|ef�� & op]D� �0Y �2|efAdcZg|���f��3� ]gb _�f�v ��]�� ZcbBfzv ��]D�0fZg|[|e]*�zf�� � ]gb)v ��fT�.6%: ��8�6 �

��'6 � � :%8 fjuwdVYeb0]`uL_�fjuwv�d�Zcb9Y[Z��<|ef�q �Ef�f S^f�� v0Ye]`u ,.&M(�l PRuwvEf�b �sZ�� f vE]v ��f / / <Z�����Z��gfHm k <Z��gf), i`x &

� � :g�A: ~AuLZ��2|ef��4_�]`u�]`|�Yev �LY���vEbBZguA�0Y[v0Ye]`u b0fj|[Zcv0Ye]`u� � � ��6<� � � �

� ]`u�� �LuA� v0Yedgf <ZcbBv0Yev0Ye]`uLY[uA���MYev � v ��bBf�� ��]`|�� ]��MfjZ�� � <Zcb0v0Y[v0Ye]`u �Ef�v�vE] � � q /T~�?Ji"Jc*VU k�MYev � �� � ��h�mgmgm x

� � � � � /T~AoAQ�~ C i(UM~ / ���A�EfTW v �Lb0f�� � Y[u��EvEfjZ�� &� �=5�;�� � � �~AuLZ��2|ef��4Pj�M|���FgnI� ]`u�� �LuA� v0Yedgf(2Zcb0v0Yev0Ye]`uLY�u.�aZguA� �Ef�v �Mv �Lf v ��b0f�����]`|�� ]��(fjZ�� ��<Zcb0v0Yev0Ye]`u vE]

� �

� �D:L� ~AuLZ��2|ef���� ]`u�f,]��GY[uo�'��fjuA� fTb0f��A�A� v0Y[]`u� ��:�> L������� � /TY��0Z��<|ef��MZ�R\uLYev{}*��|����EvEf�bBY[u.�� �=5�;�� � �����6�: 8�6 �~AuLZ��2|ef��4Y>�M| ��Fgn Lb0f�]gb���f�b9Y[u.�� �O� ~AuLZ��2|ef��+/"- C Y[uA�EvEfjZ�� ]��!/ / /�_�]���fj| ����f����^Y�u.�� �O� � S^f�v ���2_2� |efjuA�gv � d�Zcb9Y[Z��<|efgkA�A�0f�� �w} /"- C

� :�c� W* |, �LbBY[uwv ��<ZcvEvEfju�f�� _�]���fj|�vE] =<|ef �� |, �

� : � �\* |, � o bBY�u v �"��]^]`|efjZgu _�]���fj|�vE] =<|[f���� |, �

Page 64: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

/�Y �<|[Ye]��gb9Z��� } (cm

� %����� � �;��� � �

l / C�C � F�F*m i &+/�Yef�bBfgk�i & C Y[_aZcvEv0Y k�~�& C |�Zcb �gfgkFZgu�� �)& �?��� & SV}^_ ��]`|[Y��4- ]���fj| C ��f����^Y[uA� ��Yev �VW]D��v / /�/ �&��'( (?, � � �'& �i, � ( � � �� * � \( � 5q(�� ������� � � ( � � ��& � � � ,.- � � � (� ���- ��� �\* � kMP uUFi C iTS�� F�F^k?- Zcb ��� h�F�F�F�&l C�C �+,^mDG*m@i & C Y[_aZcvEv0Y�k ~ & C |[Zcb �gfgkA~ & � Y��LuA� �LY �`|[Y[ZVk!? & �TY��Lu����LY �`|�Y[ZVk - & ozY��EvE]gb0fgk - &(Q4]�dgf�bBY�kzQ &S^f�<Z��Ev0Y�ZguLY�kLZguA� i &<UpZ������fj|[|�Z�&�<��2S.- X G^��iFu j��fju2SV]D��b�� f Ut]^]`| � ]gbFS^}V_ ��]`|[Y � - ]���fj|

C ��f����^Y[uA�.& 7 �Y( � ��& � ��� ��(� 5q(?* �� � � � � � & ��&���� � � � � � (��05 ��� � � ��k?GcmgmDG�&l C�C �TQ�mgm�m�i & C Y[_aZcvEv0Y�k`~ & C |[Zcb �gfgkN? & � Y��LuA� �LY �`|[Y[ZVkcZguA�I- &`Q4]�dgf�bBY &0� �������"� Z uLf9� �E}^_ ��]`|[Y��;_�]���fj|

����f����gf�b�& & . �� ����� � � � ( � � ,�� ( � � � � ,d(����'(� ��(/ � �����'( (?, �� \( ������� �'(+, ( �)-�� � � � � ���������������kG�q ,wx9k?- Zcb�� �4Gcmgmgm�&

l / C * - ,�F�,�m��& Q &%/ ��b ���6k`~ & - & C |�Zcb �gfgkD/)& ~�&V*O]`u.��kD12& * &D-���- Y[|[|�Zgu6kgZguA� / & * &�/FY�|[| &GSV}^_ ��]`|[Y�� - ]���fj|

C ��f����^Y[uA� � ]gbrS^f 1���fju v0Y�Zg| C Yeb���<Yev.X(f�b9YA=���Zcv0Ye]`u & .�������� � � � � � � � (�� � ( � 5q(?* �� � ��� �� � & ��&�� � � � ���(� <. ��� � ��� � � �J& 5 � � � � � � � �'&���- ��� �B* �9kphjl�q ,wx9�-,`m�h9yg, G�,�kmi <bBY[|Gh�F�F�,.&

l C �+P FNO/m ~�& C |�Zcb �gfgkIj)& �Fb��L_ ��f�b �TZguA� 1 &(P�Zg_aZ��D�����LY &!iFu�]gv ��f�b7*t]w]�� Zcv7*^U\*�- ]���fj| C ��f����^Y�u.�.& k( �W* � ,"! � �� ( & � � �#��- ��� �B*$� � � � ���<kOh�mLq h=x9� nNOjyJO^hck9?�f�Lb��LZcbB} h�F�FNO%&

l C - / Fcm�m j)& C ]D�A��f�b0v�k C &K/;f�b0v ��f�v�k ZguA� � & C &3- Z���b0f�& X(f�bBYA=���Zcv0Ye]`u ]����E}VuA� ��b0]`u�]D�A�)�Ef 1���fjuwv0Y[Zg|_aZ����<Y[u�f�� �<Z��Ef�� ]`u4�0}^_ ��]`|[Y�� f0 Vf����v0Ye]`u &�PRu � &6SVY �sZ��^Y ��kLf��LYevE]gb=k�7 �O( ����J& � ��� � (� �� � . � �� ����� � � � ( � � ,&% ( � � � ��( � ( � � � ��(?* � � � #����� � � � � ( �'! � ���( & � \( �( � � � � �)��� � � �*��- ��� �B* � kdg]`|��L_�f.,`mgO ]���+-, 5��Lk.<Z��gf���lV(gn=y^lNOcl^kh/;f�bB|[Y�u6k � �Lu�f�h�F�Fcm�&4S�LbBY�u.�gf�b�&

l /TY[|�igi*m /)&�/TY[|�| &)� � � �.� � �J( �W-� B(�� � � ��(+* � � � &/ � ��� � � �� � � ,0����� � � � � ( � (� &� � � ��& �%. �'& � � ���'& �����5 � � � � � � &�i C - /FY �Ev0Y[u.�D�LY � ��f��*/FY � �Ef�b0v0Zcv0Ye]`u��& - P U oAb0f�� ��kth�Fgigi�&

l ~ - SLS.FVh0mN~�&9iF|[|efju ~A_af�b��E]`u6khi & 1 & - ]��"kmi &Oo bBZ��0Z�� S�Y��Ev0|[ZVk6ZguA� � ZgYASVbBY[uLYedcZ��0Zgu &)1 �<Zgu v0Yev0Zcv0Y[dgfvEfj_ �]gbBZg| bBfjZ��E]`uLY[u.�.&.PRu ~ �L_)�LuA� - & C |[Zcb �gf\ZguA� Q4]���f�b0v o3& 1 ��b�� �LZguOk6f��LYevE]gb���k 7 �Y( � � ��& � ��� � ( 5q(?* �� � ��� � � � & �J&2����� � � � � ( �305 ���54 1 � ��k)dg]`|��<_�f nglVh ]��)+-, 5��Lk <Z��gf��hjlV(=y2h0, n^kh/zf�b9|[Y[u6k �Ff�bB_\Zgu }gk � �Lu�f�h�F�FVh�&4S�LbBY�u.�gf�b�&

l -���- Y[| F�G*m 1 & * & -���- Y[|[|[Zgu &6� � �*�7!8� �W- ��� �B*:9��&; �( &� &th�F�F�G�&iMdcZgY[|[Z��2|ef Zcv � �w� �"!$#�#�5�5%5)�B�^�G�0�j���)�76 8`�'#A9 �':%8%6�;V� � 6L�=<A#�� �<��#L� �<���?>c�w��>%;A� �A@ �$@(�B�6�%&

l -���- Y[| Fgl*m 1 & * & -���- Y[|[|[Zgu &<� -j* �J(?, � )! ( & �B, 5 � ���� � ����& 1 |�� �;f�b+i���Z���fj_aY��,o �.�<| &ek6h�F�Fgl�&l - ZcbBvBign*m i &

�&�- ZcbBv0Y[u & U���f(�Lf��0Y �`u�]��pZ �0fj| ��W v0Y�_�f�� ��Yeb���LYev � ]gb��LY��EvEb9Y ����vEf���_ �Lv �LZg|�f0 ���| �A�0Ye]`u &GP u

P &%?A�A� �A�pZguA� � & P &%?�b0f�fj_\Zgu6kcf��LYevE]gb���k�7 �Y( �����& � ��� �F(� �� � ��1>= 3 5 � � � �B,?/ � , ,�5q( � � � � � �( �@�A+B� .9k.<Z��gf���G�, n=y�GV(cmVkh<Mf9� � ]gb��2kth�Fgign�&

l - j.j6<�mgm�m- ]^]`u6k8P�Z�� � vEfj|�k S^]`_�fju �jY�k9/;]gb���f�bEW /�|e]�� �rU bBY[u.�D�L|�Zcb�?�]gb9_?ZguA� C ]`u��$�Lu�� v0Ye]`u S�����f����L|efY[u P _aZ��gf C ]`_2���v0Zcv0Ye]`u6k�vE].Z�A�fjZcb4Zcvc? - C i /Tmgm�&

l Q\iFo ,�Fgn*m Q(& 12&OQMZgu��0Zgu6kFi &mi �jY��gkF/�&toz|ef�� �0Y[f�bjk C &OozY V|[f�}gktZguA� Q & 1 &9/;bBZj}^vE]`u &�~7RI��Yefjuwv./ / /Zg| �g]gbBYev �<_2� � ]gb;? S.- �E}Vuwv ��f��0Y��;ZguA��dgf�bBYA=���Zcv0Y[]`u &GPRu .�������C� 5"! 7 �Y( � ��& � ��� ��. �� ����� � �� � (�� � ,0% ( � � � ��( � ( �'+k( � � �� - ��� � � � � kL*tZ��gf U Z���]^f.q <�X x9k?- Z=}rh�F�Fgn�&

l S^]`_IFgi*m ? &�S^]`_�fju �jY & C J / / � C J /Ff���Y��0Y[]`u�/TY[Z��gbBZg_ <Z�� �cZ��gf)D b0fj|efjZ��0f)G�& G�& m*/�f2Zcb0v0_�fjuwv�]��~A|ef�� vEb9Y���Zg|�ZguA� C ]`_ ���vEf�b5~AuA�`Y[u�f�f�bBY[uA�ED J�u<Yedgf�b��0Yev{}r]�� C ]`|[]gbBZ���] Zcv&/;]D�L| ��f�bjk - Zj}h�F�Fgi�&l XFY ��FV(*m + XFP0S"�mi �E}��EvEfj_ � ]gb X(f�bBYA=���Zcv0Ye]`u ZguA� S^}Vuwv ��f��0Y���+ck U ��faXFPES��Fb0]D�.Ok PRu v ��f.oAb0]�� f�f��VWY[u.�D�z]��6v ��fFi�v �.P u vEf�bBu<Zcv0Ye]`uLZg| C ]`u.� f�b0fjuA� fM]`u C ]`_ '��vEf�b�iFY���f��\X(f�bBYA=���Zcv0Ye]`uOk B, Ggi�W , l�G^kS�LbBY�u.�gf�b *Of�� v �Lb0f�<�]gvEf���Y�u C ]`_ ��LvEf�b S���Yefju�� fgk � hgh�mDG^kM~ �LY[vEf�� �w} Q &�iF|���baZguA�KU &

PMfju �jY[u.�gf�bjkX<�f9��/;b��Lu��)�MY����2kB< � k � �L|e} h�F�FV(

Page 65: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

i �"fju��LY i � C ]`_ 2Zcv0Y �<Y[|[Y[v }f�MY[v � C -�J ����� (Vh

� � � ������ � � �`�� � � ��%�����$� � � $� � ��� � � �

U��Lf � �'����� |[Zgu.�D�<Z��gf�Y �(_�]D�Ev0|e} �0]D��b�� f�� ]`_ <Zcv0Y��<|ef �MYev � v ��f�]gbBY �`Y[u<Zg|wdgf�b �0Ye]`u ]�� ����� �LY��EvEb9Y ����vEf��Zcv C Zcb9u�f�`Yef2- fj|�|e]`u JFuLYedgf�b��0Y[v }�� b0]`_ � �LY����c�;fI�Ev0ZcbBvEf�� &aP urv �LY�� Z�A�fjuA�<Y ��;f2��f�� � bBY ��f5v ��f\_a]D�Ev� ]`_a_�]`u LbB]��<|efj_2� v �LZcv)��Zgu ��f.fjuA� ]D�LuwvEf�b0f�� � ��fju vEb0}^Y�u.� vE] �A�Ef�]`|�� C -4J ����� Lb0]��gb9Zg_2�'��Yev ��`�'����� &

U��Lf;_aZgY�u <b0]��<|efj_DY��pd�Zcb9Y[Z��<|ef;uLZg_�f��(Y[u ]`|��)Lb0]��gbBZg_I� v �<Zcv � ]`uo�<Y�� v �8�MYev � u�f9��b0f��Ef�bBdgf��3�z]gb����&U���f,|[Y �Ev�]��pv �Lf,u�f9� b0f��Ef�bBdgf��T�;]gb��A�)]��3�`�'����� �(& b�& v& C -4J ������Y ��v ��f(� ]`|[|e]/��Y[u.���S��;E�� ����Y�� ��� � � � �\W�� � � � ������G�� �U���f��Ef uLZg_�f��4Zcb0f b0f��Ef�b0dgf�� � ]gb4v ��f *^U\* vEfj_ �]gbBZg|6]��f�bBZcvE]gb �&ZIGUZA� �UR�� P{v�Y��"�A�Ef�� vE].Y[u vEbB]��A��� f6*VU+* �$�f���YA=���Zcv0Ye]`u��&D ���JCNH�� �UR � P{v�Y��"�A�Ef�� vE].Y[u vEbB]��A��� fTY�u dcZcbBY[Zguwv��$�f���YA=���Zcv0Ye]`u��&D �JCgH P{v�Y��"�A�Ef�� vE].Y[u vEbB]��A��� fTY�u.���v�dcZcbBY[Z��<|ef���&'Y'�NGLD �NR P{v�Y��"�A�Ef�� vE].Y[u vEbB]��A��� f�+\� �A�Ev0Y�� f�+ � ZgY[bBu�f�� �"� ]`uA�0vEbBZgY[uwv �&�UW����UC.�%�BDNW�� P{v�Y��"�A�Ef�� vE].Y[u vEbB]��A��� f�+� ]`_ <Z����0Ye]`u0+ � ZgY[bBu�f�� �"� ]`uA�0vEbBZgY[uwv �&

U��Lf�D ���IZUR%�UR��IGA�LkXD=� �gYJG"kBW�Y G �gY GI�Ev0ZcvEfj_�fjuwv ��ZcbBf,u�]gv�� �.A�]gb0vEf��*�^}I� �������'&(U���f�} Zcb0f <Zcb �Ef��� bB]`_ v ��f Y[uA���v�=<|efgk.����v4ZcbBf Y[uwvEf�bBuLZg|[|e}.Y �`u�]gb0f�� &

� �������2�LY�:�f�b�� � b0]`_ C -4J �����aZg|��E]5Y[u.v ��f�� ]`uwvEb0]`|��;v �LZcv�Zcb0f �f�b � ]gbB_�f��a]`u�v ��fTY[u.'��v � ]gbB_ �<|[Z��&S^f�dgf�bBZg|�� ]gbB_)�L|[Z��Av �LZcvAZcb0fMd�Zg|[Y � � ]gb C -�J �����2kD�'��v(v �LZcv �<Zjdgf�uL] ��|efjZcb �0fj_aZgu v0Y ���kwZcb0f�u�]gvzZ��� fLvEf���w} � �������'&GP u <Zcb0v0Y���<|[Zcbj�? P{v�Y��)u�]\|e]`uA�gf�b��]D� �0Y �<|[f�vE]f�MbBYevEf � ]gb9_ �L|�Z���� ]`u v0ZgY�uLY[u.�au�f��0vEf�� � �A6��w�� &

GgH C%�.���6��w��� >�;=� � > K��6��w��� �6`�A> �a�A6�� � �Z<�>��w�?> ��� � � � 8�6�;`�.>? P{vGY�� u�]F|[]`u.�gf�b �]D� �BY �<|ef(vE] �4bBYevEf � ]gbB_)�L|[Z��3� ]`uwv0ZgY[uLY[u.� � �A6��w���Y[u,v ��fzbBY �D�wv �LZgu�� �0Y ��f ]�� +�u�]gbB_aZg|$+ZguA� +�Y[uLY[v�+zZ�� �0Y �`u<_�fju v ��q v ��f�}�Zcb0fMZg|[|e]*�zf��.Y[u5v ��f4b9Y �D� v �<ZguA�2�0Y��Lf)]�� +�u�f0 Vv�+)Z����0Y �`uL_�fjuwv �9x9k^ZguA�

�MYev � v �Lf(�Ev0ZcvEfj_�fjuwv � � D=�%�JCgH��LZguA� � D=�TD$G�� &D ���JCNH��6��w��� >�;=� � > �( A6 �.>D �TD�G��6��w��� �6`�A> � � � >%;�� � >C����BD�E%�

8�6�;`�.> ! � >%;�� � > K��6��w� ��<.>=�^�?> � � ��� ��:`�g�?>%; >L�w�w��<`� �'6g�V�"����"�c���Z<.>=�^� > � !�� >�;=� � > &�A6�� � ��8�6�;g�A> � � ��� ���"�c� >L�w�w��<`� �'6g�V�"�? P{v�Y��)u�]\|e]`uA�gf�b��]D� �0Y �<|[f�vE]f�MbBYevEf � � �UR � �ek � SJCXD$H��IRA�%� �.�Ev0ZcvEfj_�fjuwv � � ]`uwv0ZgY[uLY�u.� � �A6��w�� &

SUCLD$H��UR.�����6�� � �E� �^�w���=�D< �� �UR ���6�� � � � � ��

? U���f(� ��f�� � � ]gb ��Yeb���<|[Zcb���f�fjuA��fjuA��Y[f��)Zg_�]`u.�adcZcbBY[Z��<|[f��"�LZ��"��f�fju ��]`u�f _a]gb0f b0f��EvEbBY � v0Yedgf�&�rf2�0Zj} v �LZcvTd�ZcbBY�Z��<|ef � ��f�fjuA�A�4]`u dcZcbBY[Z��<|[f - Y � � ��� �- � &��rf �0Zj} v �LZcvTv ��f�b0f5Y���Z ��Yeb ��L|[Zcb��f�fjuA��fjuA� }�Y[u v ��f(�Lf>=<uLYev0Ye]`u�]�� � Y �{� � ��f�fjuA�A�;]`u Yev �0fj| �;qGf�& �.& � �� � �e- ��x � � ��f�fjuA�A�A]`u -aZgu�� -2��f�fjuA���(]`u �rq f�& �.& � ��� - �TZguA� - �� �� �F]gb � �� � ��k�� ��� - �ZguA� - �� � �5x &

Page 66: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

i �"fju��LY i � C ]`_ 2Zcv0Y �<Y[|[Y[v }f�MY[v � C -�J ����� (�G

PRu\v ��f ��Z��0f�]�� ��Yeb ��L|[Zcb ��f�fjuA�LfjuA��Yef�� Zg_�]`uA� dcZcbBY[Z��<|ef��Av ��f�b0fFY��Au�].= ^f��\]gb���f�b�Y[u;� �<Y����;�;f ��Zgu� ]`_ ���vEfTv ��f Y[uwdg]`|edgf�� dcZcbBY[Z��<|[f��&Ki�dg]`Y��LY�u.�)��Y[b���L|[Zcb ��f�fjuA��fjuA��Y[f��zZg_�]`uA� dcZcbBY[Z��2|ef�� �D�<ZcbBZgu vEf�fv �LZcv v ��f�bBfrf0 VY��0v � Zgu�]gb���f�b Y[u � �<Y����&v ��f dcZcbBY[Z��<|[f�� ��Zgu ��f�� ]`_2���vEf�� &�PRu � �'����� ��Yeb ��L|[Zcb��f�fjuA��fjuA��Y[f��)Zcb0f u�]gv4Zg|[|[]/�;f�� &PRu C -�J �����.v ��f,vEf��Ev � ]gb���Yeb���L|[Zcb"��f�fjuA�LfjuA��Yef��)Y��)Z��<|[f vE]���f�vEf�� v ��Y[b���L|[Zcb���f�fjuA�LfjuA��Yef���]`uL|e}Y[u�+�u�]gbB_aZg|7+TZ�� �0Y �`u<_�fju v �jkLZguA� u�]gv4Y[u�+�u�f0 Vv�+TZ����0Y �`uL_�fjuwv �& U��Lf(��Yeb���L|[Zcb"��f�fjuA�LfjuA��Yef�� ����f����]�� � �������2�LZ�� �"f�fju.f0 VvEfjuA��f�� vE] ��f�vEf�� v"��Yeb���L|�ZcbBYev0Yef��zZg|��E]�Y[u + u�f0 Vv�+�Z�� �BY �`uL_�fjuwv �&!?�]gb4Y[uA�0v0ZguA� fv ��f(� ]`|[|e]*�MY[u.� � bBZ��`_�fjuwv4]�� � ]���f,Y �4Z��� fLvEf�� �^} C -4J ����������v��LY � ��Zcb���f�� �^}�� �'�����'&

�BWVQIYJZUR � >�����UCgH� !��:%:�;%6�>c� �� !��:%:�;%6�>c� �

C����BD�E%���6��w��� � � ! �!�! ��6��w� � � � ���6��w��� � � ! ��� ��6��w� � � � �iFu�]gv ��f�b��LY�:�f�b0fjuA� f ��f�v[�;f�fju � �������.ZguA� C -�J ����� Y��4Y[u v �Lf,d�Zcb9Y[Z��<|efT]gb���f�b\=<|ef�&AU��Lf d�ZcbBY�Z��<|ef]gb���f�bBY�u.� =2|ef�Z��� f<vEf�� �w} �`�'����� ��Zgu ��f*<Zcb0v0Y[Zg|�ZguA� ��Zgu � ]`uwv0ZgY[u�dcZcbBY[Z��<|ef��5u�]gv ��f���|�Zcb0f���Y[u v ��f_�]���fj| & X ZcbBY�Z��<|ef��4|[Y �EvEf�� Y[u v ��f ]gb���f�bBY[uA�f=2|ef ����v4u�]gv ��f���|[Zcb0f�� Y�u v ��f _�]���fj|OZcb0f �0Y[_ <|[}I�LY�� ��Zcb ��f�� &U���f dcZcbBY[Z��2|ef�� ��f���|[ZcbBf��,Y[u v ��fz_�]��Lfj|�����vOu�]gv |[Y��EvEf��,Y�uTv ��f dcZcbBY[Z��<|ef!=2|ef Lb0]�d^Y��Lf��,Y[u Y[u.'��vOZcb0f � b0fjZcvEf��ZcvMv ��f fjuA� ]��Gv ��f �`Yedgfju ]gb��Lf�bBY[u.� � ]`|[|e]/��Y[u.��v ��f �Lf� Z��L|[v4]gb���f�bBY�u.�.&�iF|[|6v ��f,]gb ��f�bBY[u.��=2|ef��"�gfju�f�bBZcvEf��

�w} C -4J ����� Zcb0f4Z��� f<vEf��.Y[u5Y[uA���v0� bB]`_ �`�'����� �'��vGv ��f)]gb���f�bBY�u.�6=<|ef��0�gfju�f�bBZcvEf��I�w})� ������� _aZj} ��fu�]gvzZ��� f<vEf��I�^} C -�J ����� &#<M]gv0Y�� f�v �LZcvAv �Lf�b0fMY�� uL](�D�LZcbBZguwvEf�f�v �<ZcvAZ �g]^]��\]gb���f�bBY[uA� � ]gb C -�J �����Y��(Zg|��E] Z �g]^]��5]gb ��f�bBY[u.��� ]gb �`�'����� &tP u5v ��f�]gb���f�bBY[uA�c=<|[f�� � ]gb � �������"kgY���fjuwv0YA=Lf�b��V�.:��D6<�w�

���6�; 6L���.: �

���Zgu ��f(�A�Ef�� vE]I� ]`u vEbB]`|Ov ��f �]D�0Yev0Y[]`u ]��pv �Lf d�ZcbBY�Z��<|efTv �LZcv4fjuA� ]���f�� Lb0]�� f�� ���Efj|ef�� v0Y[]`u & P u C -�J �����YevMY��Mu�]gv��]D� �0Y �2|efTvE]�� ]`uwvEb0]`|Ov ��f �]D�0Yev0Ye]`u ]��Gv �LY��4d�ZcbBY�Z��<|ef,Y[u v �Lf,]gb���f�bBY�u.���LYevMY�� �LZcb��VW � ]���f�� Zcv�v ��fvE]� ]��Gv ��f ]gb��Lf�bBY[u.�.&

Page 67: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

C ]`_a_aZgu�� PRu���f0 (gl

�` � � � ��� � ��� � �

����������������������������������������������������������������������������������������������

-�� � ������������������ ������������������������������������������������������������������� ������������ ������������������������������������������������������������������������������������

p��� � ������� G � �������������������������������������������������������������������������"! "��� � ����� � G ������� �������������������������������������������������������������������#!��� G ���� �� � �� ���� ��������������������������������������������������������������������� � !

#��$ � �&% ���&'�(���� ��������������������������������������������������������������������� ��)��$ � �&% ���&'�(������ ���*� �����������������������������������������������������������+!�!��$ � �&% ������������� � ����������������������������������������������������������������� ��,��$ � �&% ������������� � � ���*� �������������������������������������������������������-! "��$ � �&% ������������� � � ���*� ����'���� � �.�����������������������������������������/!0��$ � �&% ���&��� � ����������������������������������������������������������������������� ��)��$ � �&% ��������'.� ��������������������������������������������������������������������� ��1� � � � G ��� ����������������������������������������������������������������������������� ��,� � � � G ����������� �&$ � � ��� ������������������������������������������������������� ��1

���'0� � � � ��(����������� �������'�2 �������������������������������������������������3� "

>� �&$ � �����������������������������������������������������������������������������������+� ���' � �� �����(����0��� � ����� ��������������������������������������������������������� � !

4 ����������'�� $ ��������� ��$ � ������������������������������������������������������� � �

52���'0����'�(������ ��� � �����������������������������������������������������������������6!��2���'0������������� � � ���*� �����������������������������������������������������������+! �2���'0������������� � � ���*� ����'���� � ������������������������������������������������! �2�� ��������������������������������������������������������������������������������������� � �2���� ���*� �������������������������������������������������������������������������������3! "2������������������ �����������������������������������������������������������������������/! ,

7$ ����� ��������������������������������������������������������������������������������������8$ ����������� �����������������������������������������������������������������������������9��8

:�0� �&% ����������� �����������������������������������������������������������������������/! 1���0��'���� ��;�; ���������0� �����������������������������������������������������������<�����0��'���� ��= ������'�������������� ���������������������������������������������������>! ,���0��'�������?0����@�A������0����'.� ���������������������������������������������������3B�����0��'���������� ��$ � � ����������������� �0�������������������������������������������CB 1���0��'���� = ����2�� ���������������������������������������������������������������������/��B����� � ������� � � ; ��� �����������������������������������������������������������������DB 1

EF = ��� ��������������������������������������������������������������������������������������B

G����� ; � � � ; ��� �����������������������������������������������������������������������HB�B��������� ���������������������������������������������������������������������������������-��B

IJ�K�LNM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�MPO�QJ�K�L�R�S ;�; R�T0��U��WVXK�L�K�U0J9M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M-O J&Y0Z�?0R�L�U���[�K�J#M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M#Q�\J&Y0Z�?0R�]���U0JCM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B�BJ�^_V =0` ��L�K>M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M"Q�aJ�Z = U0[�KbM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�MbO�O

cL�^_VXKPM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�O�\

d=�e � ` ^���J>M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M9O�\=�e J�K�L�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M-O�\= J���f�KgM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M-O�\

h?�Y.^�[�Y+M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M-O�\?�U0^�L�K�R�Z�U ; K�UHM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B Q

Page 68: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

������������� ��������� ���

�����������! �" #�$!%&"('

)�+*,*0^ e ^�L,-3M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B O��f�R�Z e0` -�R�J�K���U�[�Y M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B a� = L�Z�K,.�K�[�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M>O�a

/S�V [�R ; ^_VX��[�J�R+*�^ ` K e �_VXKbM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M3Q�QS�V [�R�^ e ]���U�R ; ^ V ��[�J�R�*0^ ` K e �WVXK#M.M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M Q�OS�V [�R ` K e f�L�Y M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M/Q�QS�V [�R ` Z�Z�T�S0��[10CM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M#Q�Q

2[�Y�K�[10.R�L�U�� e J#M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B a[�Z e43 R�T0��U�L�R�L�Y�U�K�J�Y0Z `�; M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B O

5K e ��S ` K�R�U�K�Z�U ; K�U M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�MNQ,6

7*0^ ` K�[bM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�O�a*�Z�U�?0��U ; R�J�K���U�[�Y M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B a

7Y.^�J�L�Z�U�-�R�[�Y0��U/M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M/O�a

8^_VX��f�K�R�[ `�= J�L�K�U�R�J�^�9�K;:b^_V ��f�K�R�<4=4>?:A@B:DCB:FEHG9M�M�M�M�M�M�M�M B O^_VX��f�K�R�]�K�U�S0Z�J�^�L�- M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B O^ e T = L�R+*�^ ` K"M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B�B

^ e T = L�R�Z�U ; K�U�R+*0^ ` K M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B Q^&? ` J�@�A�T�U�K�Z�U ; K�U M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B O

IJ�=4K�L�M RONQPOR�SUT+S�V0R�WUT,X,Y�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�MHO�aHZ*O+6e�= J_V.]�R�J�L ; K�U�UHM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M#O�ae�= J_V.]�R�J�L ; ^ e M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M/O�ae�= J_V.]�R�J�L ; Z = LHM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M#O�a

[

Z�T�K e R�T���L�Y>M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�O�aZ = L�T = L�R�Z�U ; K�U�R+*0^ ` K M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B Q

:T���U�L0^�L�^�Z e RWV.K�L�Y0Z ; M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B O

GU�K�Z�U ; K�U�RWVXK�L�Y0Z ; M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M<Q�\

IJ���L�R�J�Z ` ]�K�U�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M/Q�OJ&Y�K `�` R�[�Y0��U�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�MCO�aJ&Y0Z�?�K ; R�J�L���L�K�J6M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M6Q�a

]

]�K�U�S0Z�J�K�R ` K�]�K ` M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B�B

Page 69: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

���� ��� � �

#�$!%&" '

�� T�� M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M<O�6� S�V*[+M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M+O�\� S�V*[�� M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M<O�\� [�Z�^+M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M+O�\� [&T�� � M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M>O�\� [&T�T M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M+O�6� [�L�LNM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M+O�6� ; - e �WV*^�[�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M>O�\� * M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M O�6� YM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M O�6� Y�K ` T+M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�O�6� ^� �� �����gM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M O�6� ^�[<M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M<O�6� ^�^<M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M<O�6� ^ ` J+M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M+O�6� ^ e LNM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M+O�6� ^�J<M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M<O�6� ^&? ` J�@�A��� �0M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M O�\� ^&? ` J�@�A�T�U�K�Z�U ; K�U M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M<O�\� ` Z�� ; ������� ����� M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�MbO�\� ` TM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M<O�6� V�������! "�-M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M3O�\� VXZ e Z-M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�O�\� e #�%$3M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�MCO�6� e Z��+*�*0^ e ^�L�-HM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�MHO�\� Z& '� �����"M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M9O�6� Z�S�V)(�� �*���3M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M+O�\� Z�*�V�+�� ����� M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M O�\� U M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M O�6� U�K�Z�U ; K�U3M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M>O�\� J<M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M O�6� L�Y�U�K�J�Y�� �0M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M O�\� ]&�'��,�(- '.����/�����'��� M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�MgO�6

01 2436587:94;-< M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�MPO�6

= ;->?<%@%585 58@%AB@%<�C->'; M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M/\ 8

D

EGF 1 2H3!587I9?;-< M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�MgO�6

)

J'K 7�LB26LB5MC8; J C-LB>'2N<%>�7�7 J 2 K 5 M&M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M O

/O J C-<QP Z ;-36262!LB26R J�=4K�L�M M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M>O�6S >'362 K @ K&T > K @%AVUWP6@%<QX4L�2!R M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M Q

2

< J 58@Y@�Z = ;-@�5858L�>'265 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8�8UW>'7�7 J 2 K 5W[�>'; S >�3!2 K @ KNT > K @�A\UWP6@�<�X4LB26R M�M�M�M�M�M�M�M B \<�>�7�7�@%2?C-5]LB2 J�=4K�L�M A J 2!R�3 J R�@ M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8�<�>�7 = J 5858LB>�2N<%>'265MC8; J L�2?C-5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 \U]^`_a7�> K @%Ab<�P!@%<QXHLB2!R M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M "cU]^`_ed = @%<%Lgf6< J C-LB>�2!5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 \

h

iji = J <�X J R'@YL�2?C-@�;8[ J <%@ M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�MCQ�6k�l?m P J�l K @%<%A J ; J C-L�>'2 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 O

5n Z J 7 = A�@�5 M&M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8@�Z = ;-@%5858LB>�2!5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8�

7

[ J Lg; = J C-P!5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 \[ J Lg;-26@�585o<%>'265MC8; J L�2?C M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�MHQ[ J Lg;-26@�585o<%>'265MC8; J L�2?C-5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 \[ J Lg;-26@�585o<%>'265MC8; J L�2?C-5 K @�<%A J ; J C-LB>'2 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 \m T4POS J�lHK�K K @%<%A J ; J C-LB>�2!5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 \

8

L K @%2?C-LBf6@�;-5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 aP J P�X K @�<%A J ; J C-LB>'2 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 OLB2 = 3!Cp9 J ;-L J O AB@%5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 QLB2?C-@�; J <�C-LB9�@Y58P6@%ABA M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B�8LB2?C-@�; J <�C-LB9�@ Z ;-36262!LB26R J�=4K�L�M M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B�8LB2?C-@�;8[ J <%@qC-> ijisr J <QX J R�@ M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M3Q�6LB2?C8;-> K 3!<�C-LB>�2 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M P J�M T,S K @%<%A J ; J C-L�>'2 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 OP K T K @%<�A J ; J C-LB>�2!5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 \P M T,SNM�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 Q

t

u 365MC-LB<%@Y<%>'265MC8; J L�2?C-5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 \

v

_H^`_a7�> K @%Ab<�P!@%<�X4LB26R M&M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M �8_H^`_ed = @%<%Lgfw< J C-LB>�2!5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B�c

x

VX��^ e 7�> K 3!AB@ M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 67 J 5MC-@�;"1 2436587I9?;-< M_M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M9O+67�> K @%Ay<%>�7 = LBA�LB2!R M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B�B7�> K @%A = J ;-58L�2!R M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B�B7�> K @%Az;-@ J�K LB26R M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B�BL4{Gk�| N l K @%<%A J ; J C-L�>'265 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 \

Page 70: nusmv.fbk.eunusmv.fbk.eu/courses/esslli02/user-man.pdf · 2002-08-22 · Y 3F! 6 ,*a@5Ip! 7B 3 @!" O70%4/ G & [h ~! Zg_

���� ��� �?�

I

2!@�Z4Cp@�Z = ;-@%5858LB>�2!5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8�8

[

> = C-LB>�2!5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M O�6

:T�U�Z�[�K�J�J X�@����W>'; K M&M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 6= ;->?<%@%5858@%5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 6

G� @ J A ^]LB7�@ U]^`_ d = @%<�LBf6< J C-LB>'265 J 2 K UW>�7 = 3!C J C-L�>'265M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B�U =�e�e ^ e f9M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 \

I

J�K ` *<M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 658@�Co@�Z = ;-@%5858LB>�2!5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8�8d4P6@%ABAy<%>'2!fwR'3!; J C-L�>'2�� J ;-L J O AB@%5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M-O�a58LB7 = A�@j@�Z = ;-@%5858LB>�2!5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8�d4LB7I36A J C-L�>'2 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�MH\d4LB7I36A J C-L�>'2&UW>'7�7 J 2 K 5 M&M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�MDQ�\5MC J C-@Y9 J ;-L J O AB@%5p5��H2?C J Z M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8�B5��H2?C J Z M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8�

c� L�KWV0T Z�U ;�� M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M B Q^b; J <%@%5� /265 = @%<�C-LB>'2�UW>�7�7 J 2 K 5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�Q�6X+SUT J4K K @%<%A J ; J C-L�>'265 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8 O^ 3!C->';-L J A M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8C�� = @ K @%<�A J ; J C-LB>�2 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8�BC�� = @q5 = @%<%Lgfw@�;-5 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8�B

]M T,S K @%<�A J ; J C-LB>�2 M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M�M 8�B