 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
| • |
SDL differentiates between process definition and
|
|
process
instance
|
|
|
| • |
Defined
process activation mechanism
|
|
|
| • |
Receiver
process instance
|
|
|
(1 receiverprocess start
|
|
|
((ackid . nil) (frameid . nil) (self .
1)
|
|
|
(sender . nil)
(parent . 0) (offspring . nil)
|
|
|
((start …)) nil)
|
|
|
| • |
Correctness property: defined a recognizer for
|
|
|
valid
instances of a system
|
|
|
(defthm activate-makes-instance
|
|
|
(implies (wf-type S)
|
|
|
(wf-instance
(activate S) S)))
|
|