next up previous
Next: Constraints Up: Invariants Previous: Diverging Counter

Metacomment

In invariants it's awkward writing s(x) and s(y) all the time since s is universally quantified. So more typically you'll see invariants expressed directly in terms of the state variables. For the DivergingCounter, you'd more likely see its invariant in this more readable format:

tex2html_wrap_inline586

We use this syntactic sugar in the pre- and post-conditions already.


Norman Papernick
Mon Mar 18 14:28:12 EST 1996