-
Per documentation, "properties like I cannot find information what |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
My understanding is this - to check for liveness, we need the machine to transition to a non-hot state, right? In a simple case, this might be sufficiently expressed by having a |
Beta Was this translation helpful? Give feedback.
My understanding is this - to check for liveness, we need the machine to transition to a non-hot state, right? In a simple case, this might be sufficiently expressed by having a
hot
state (or states) and the checker verifies that at the end of a round of operations, the machine winds up in a state which is not "hot". However, we can also mark certain states ascold
to provide better assertions and tighter constraints - meaning that at the end of the round of operations, the machine ends up in one of thecold
states (so a stronger guarantee than simply being in a non-hot state). The Two-Phase commit example has precisely that in its spec.