include "sequence_aux.csp" include "function_aux.csp" include "auxiliar.csp" include "rules.csp" datatype Direction = req | ack Value = {1..3} CellId = {0..3} ControllId = {0..3} channel rd : Direction.Value channel wrt : Direction.Value channel write : CellId.Direction.Value channel read : CellId.Direction.Value channel input : Value channel output : Value channel rd_i : CellId.Direction.Value channel wrt_i : CellId.Direction.Value channel write_i : ControllId.CellId.Direction.Value channel read_i : ControllId.CellId.Direction.Value Cell = wrt.req?x -> wrt.ack.x -> rd.req?dumb -> rd.ack!x -> Cell maxbuff = 4 maxring = maxbuff - 1 Controller = let ControllerState(cache,size,top,bot) = InputController(cache,size,top,bot) [] OutputController(cache,size,top,bot) InputController(cache,size,top,bot) = size < maxbuff & input?x -> (size == 0 & ControllerState(x,1,top,bot) [] size > 0 & write.top.req!x -> write.top.ack?dumb -> ControllerState(cache,size+1,(top%maxring)+1,bot)) OutputController(cache,size,top,bot) = size > 0 & output!cache -> (size > 1 & -- A requisição de leitura não ser uma "escolha externa (via input on dumb)" para que o processo seja Strong Output Decisive -- read.bot.req?dumb -> read.bot.ack?x -> ControllerState(x,size-1,top,(bot%maxring)+1) (|~| dumb:Value @ read.bot.req.dumb -> read.bot.ack?x -> ControllerState(x,size-1,top,(bot%maxring)+1)) [] size == 1 & ControllerState(cache,0,top,bot)) within -- The initial value of the cache is irrelevant, since the size is 0. ControllerState(0,0,1,1) RenameContract(i) = Cell [[rd <- rd_i.2,wrt <- wrt_i.2]] Inst_Cell2 = <(rd,rd_i.2),(wrt,wrt_i.2)> Cell2 = rename(Cell, Inst_Cell2) GET_CHANNELS(P) = let f = < (Cell2, { rd_i.2,wrt_i.2 }) > within apply(f,P ) inputs(P) = let f = < ( Cell2, {| rd_i.2.req, wrt_i.2.req |}) > within apply(f, P ) outputs(P) = let f = < ( Cell2, {| rd_i.2.ack, wrt_i.2.ack |}) > within apply(f,P) --Condition A.1: Alphabets are disjont --assert STOP [T= RUN(inter(events(Cell2),events(Cell2))) --Condition A.2: I/O Process --Condition A.2.1: Every channel in P is an I/O Channel assert not Test(inter(inputs(Cell2),outputs(Cell2)) == {}) [T= ERROR --Condition A.2.2: The contract has infinite set of traces assert not HideAll(Cell2):[divergence free [FD]] --Condition A.2.3: The contract is divergence-free assert Cell2:[divergence free [FD]] --Condition A.2.4: The contract is input deterministic assert LHS_InputDet(Cell2) [F= RHS_InputDet(Cell2) --Condition A.2.5: The contract is strong output decisive assert LHS_OutputDec_A(Cell2) [F= RHS_OutputDec_A(Cell2) assert LHS_OutputDec_B(Cell2,rd_i.2) [F= RHS_OutputDec_B(Cell2,rd_i.2) assert LHS_OutputDec_B(Cell2,wrt_i.2) [F= RHS_OutputDec_B(Cell2,wrt_i.2)