module lampara

variables lampara, botones

∆
TypeInv = ∧ lampara ∈ {“on”, “off”}
∧ botones ∈ {“yes”, “no”}
∆
Init = lampara = “off” ∧ botones = “no”
∆
Press = botones 0 = “yes” ∧ unchanged lampara
∆
Prender = lampara = “off” ∧ botones = “yes” ∧ lampara 0 = “on” ∧ botones 0 = “no”
∆
Apagar = lampara = “on” ∧ botones = “yes” ∧ lampara 0 = “off” ∧ botones 0 = “no”
∆
Next = Press ∨ Prender ∨ Apagar
WF (A) = 2(2enabled hAi ⇒ 3hAi)
∆

2[Next]hlampara, botonesi
∆
Spec = Init ∧
theorem Spec ⇒ 2TypeInv

\ * Modification History
\ * Last modified Wed Dec 11 02:39:11 ART 2019 by damian
\ * Created Wed Dec 11 00:53:09 ART 2019 by damian