//This file was generated from UPPAAL 4.1.0 (rev. 3425), February 2008 /* */ A[] forall(i:Nodes) SYNCHRONIZER(i).S1 imply y <= CLOCK(i).x /* This is the main correctness property that we establish: whenever a node is sending all nodes in the network agree on the current slot number */ A[] forall(i:Nodes) forall(j:Nodes) (WSN(i).SENDING imply csn[i]==csn[j]) /* */ A[] forall(i:Nodes) 0 <= CLOCK(i).x && CLOCK(i).x <= max /* */ A[] forall(i:Nodes) 0 <= clk[i] && clk[i] < k0 /* */ A[] forall(i:Nodes) 0 <= csn[i] && csn[i] < C /* */ A[] forall(i:Nodes) WSN(i).GO_SEND imply csn[i]==tsn[i] /* */ A[] forall(i:Nodes) WSN(i).GO_SEND imply clk[i]==g /* */ A[] forall(i:Nodes) WSN(i).GO_SEND imply CLOCK(i).x==0 /* */ A[] forall(i:Nodes) WSN(i).SENDING imply csn[i]==tsn[i] /* */ A[] forall(i:Nodes) WSN(i).SENDING imply (g <= clk[i] && clk[i] < k0 - t) /* */ A[] not deadlock