Documenting SMV Assignments for CS 525V

General Notes

Sanity Checks

Certain properties can hold vacuously of a design. For example, a property of the form AG(p -> AF q) will be true if p is never true. You likely wrote this property expecting p to be true, though, so the verification isn't checking what you really intended. It is therefore important to prove that your properties hold in non-vacuous cases. You can use SMV to help confirm this by also checking the property showing that p does hold sometime (using formula EFp. I refer to these auxiliary properties as sanity checks.

Be sure to include a sanity check for each property that needs one in your assignments.

Analyzing Error Tracks

Analyzing an error track consists of three steps:

What to turn in for each SMV problem