%------------------------------------------------------------------------------ % File : Nitpick---2016 % Problem : SWV439+1 : TPTP v6.4.0. Released v4.0.0. % Transfm : none % Format : tptp:raw % Command : isabelle tptp_nitpick %d %s % Computer : n103.star.cs.uiowa.edu % Model : x86_64 x86_64 % CPU : Intel(R) Xeon(R) CPU E5-2609 0 2.40GHz % Memory : 32218.75MB % OS : Linux 3.10.0-327.36.3.el7.x86_64 % CPULimit : 300s % DateTime : Wed Jan 18 16:47:45 EST 2017 % Result : CounterSatisfiable 25.59s % Output : FiniteModel 25.59s % Verified : % SZS Type : None (Parsing solution fails) % Syntax : Number of formulae : 0 % Comments : %------------------------------------------------------------------------------ %----WARNING: Could not form TPTP format derivation %------------------------------------------------------------------------------ %----ORIGINAL SYSTEM OUTPUT % 0.00/0.03 % Problem : SWV439+1 : TPTP v6.4.0. Released v4.0.0. % 0.02/0.04 % Command : isabelle tptp_nitpick %d %s % 0.03/0.23 % Computer : n103.star.cs.uiowa.edu % 0.03/0.23 % Model : x86_64 x86_64 % 0.03/0.23 % CPU : Intel(R) Xeon(R) CPU E5-2609 0 @ 2.40GHz % 0.03/0.23 % Memory : 32218.75MB % 0.03/0.23 % OS : Linux 3.10.0-327.36.3.el7.x86_64 % 0.03/0.23 % CPULimit : 300 % 0.03/0.23 % DateTime : Mon Jan 16 07:59:33 CST 2017 % 0.03/0.23 % CPUTime : % 25.59/16.90 Nitpicking formula... % 25.59/16.90 Timestamp: 07:59:41 % 25.59/16.90 Using SAT solver "Lingeling_JNI" The following solvers are configured: % 25.59/16.90 "Lingeling_JNI", "CryptoMiniSat_JNI", "MiniSat_JNI", "SAT4J", "SAT4J_Light" % 25.59/16.90 Batch 1 of 20: Trying 5 scopes: % 25.59/16.90 card TPTP_Interpret.ind = 1 % 25.59/16.90 card TPTP_Interpret.ind = 2 % 25.59/16.90 card TPTP_Interpret.ind = 3 % 25.59/16.90 card TPTP_Interpret.ind = 4 % 25.59/16.90 card TPTP_Interpret.ind = 5 % 25.59/16.90 % SZS status CounterSatisfiable % SZS output start FiniteModel % 25.59/16.90 Nitpick found a counterexample for card TPTP_Interpret.ind = 2: % 25.59/16.90 % 25.59/16.90 Constants: % 25.59/16.90 bnd_admin = i1 % 25.59/16.90 bnd_admin_compartment_has_scg = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_compartment_has_sso = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_file_has_citizenship = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_file_has_citizenship_h = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True))), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)))) % 25.59/16.90 bnd_admin_file_has_compartments = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_file_has_compartments_h = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True))), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)))) % 25.59/16.90 bnd_admin_file_has_level = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_file_has_level_h = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True))), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)))) % 25.59/16.90 bnd_admin_indi_has_background = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_indi_has_background_for_compartment = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_indi_has_citizenship = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_indi_has_citizenship_for_file = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_indi_has_compartments = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_indi_has_compartments_for_file = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_indi_has_credit = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)) % 25.59/16.90 bnd_admin_indi_has_credit_for_compartment = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_indi_has_employment = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)) % 25.59/16.90 bnd_admin_indi_has_level = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_indi_has_level_for_compartment = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_indi_has_level_for_file = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_indi_has_need_to_know_for_file = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_indi_has_polygraph = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)) % 25.59/16.90 bnd_admin_indi_has_polygraph_for_compartment = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_admin_indi_may_file = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := False))), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)))) % 25.59/16.90 bnd_alice = i2 % 25.59/16.90 bnd_anycountry = i1 % 25.59/16.90 bnd_babu = i1 % 25.59/16.90 bnd_background_admin = i2 % 25.59/16.90 bnd_background_admin_indi_has_background = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True))) % 25.59/16.90 bnd_ci = i2 % 25.59/16.90 bnd_compartmenta = i2 % 25.59/16.90 bnd_compartmentb = i1 % 25.59/16.90 bnd_confidential = i2 % 25.59/16.90 bnd_cons = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := i1, i2 := i1), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := i2, i2 := i2)) % 25.59/16.90 bnd_credit_admin = i2 % 25.59/16.90 bnd_credit_admin_indi_has_credit = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True)) % 25.59/16.90 bnd_hr_admin = i2 % 25.59/16.90 bnd_hr_admin_indi_has_employment = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True)) % 25.59/16.90 bnd_india = i1 % 25.59/16.90 bnd_level_admin = i2 % 25.59/16.90 bnd_level_admin_indi_has_level = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True))) % 25.59/16.90 bnd_loca_level_below = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True))) % 25.59/16.90 bnd_loca_level_direct_below = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True))) % 25.59/16.90 bnd_nil = i1 % 25.59/16.90 bnd_no = i2 % 25.59/16.90 bnd_not_secretfile = i2 % 25.59/16.90 bnd_oca = i2 % 25.59/16.90 bnd_oca_compartment_has_scg = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := False))) % 25.59/16.90 bnd_oca_compartment_is_compartment = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)))), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))))), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True)))), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True)))))) % 25.59/16.90 bnd_owner_indi_has_need_to_know = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True))) % 25.59/16.90 bnd_owner_not_secretfile = i2 % 25.59/16.90 bnd_owner_secretfile = i2 % 25.59/16.90 bnd_polygraph_admin = i2 % 25.59/16.90 bnd_polygraph_admin_indi_has_polygraph = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True)) % 25.59/16.90 bnd_read = i1 % 25.59/16.90 bnd_sbu = i2 % 25.59/16.90 bnd_scg_compartmenta = i1 % 25.59/16.90 bnd_scg_compartmentb = i1 % 25.59/16.90 bnd_secret = i1 % 25.59/16.90 bnd_secretfile = i1 % 25.59/16.90 bnd_sso_compartment_has_scg = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := False))) % 25.59/16.90 bnd_sso_compartmenta = i2 % 25.59/16.90 bnd_sso_compartmentb = i2 % 25.59/16.90 bnd_sso_file_has_citizenship = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := False)))) % 25.59/16.90 bnd_sso_file_has_compartments = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))) % 25.59/16.90 bnd_sso_file_has_level = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False))), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := False)))) % 25.59/16.90 bnd_sso_indi_has_compartment = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True))) % 25.59/16.90 bnd_state_file_has_owner = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True)) % 25.59/16.90 bnd_state_file_is_not_working_paper = % 25.59/16.90 (\<lambda>x. _)(i1 := True, i2 := True) % 25.59/16.90 bnd_system = i2 % 25.59/16.90 bnd_system_compartment_has_sso = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True))) % 25.59/16.90 bnd_system_file_needs_citizenship = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := False))) % 25.59/16.90 bnd_system_file_needs_compartments = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True))) % 25.59/16.90 bnd_system_file_needs_level = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := False))) % 25.59/16.90 bnd_system_indi_has_citizenship = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True))) % 25.59/16.90 bnd_system_indi_is_background_admin = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True)) % 25.59/16.90 bnd_system_indi_is_counterintelligence = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True))) % 25.59/16.90 bnd_system_indi_is_credit_admin = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True)) % 25.59/16.90 bnd_system_indi_is_hr_admin = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True)) % 25.59/16.90 bnd_system_indi_is_level_admin = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True)) % 25.59/16.90 bnd_system_indi_is_oca = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True)) % 25.59/16.90 bnd_system_indi_is_polygraph_admin = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := True)) % 25.59/16.90 bnd_system_indi_needs_compartment = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := True, i2 := True), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := True))) % 25.59/16.90 bnd_system_indi_needs_level = % 25.59/16.90 (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := False, i2 := False)), % 25.59/16.90 i2 := (\<lambda>x. _) % 25.59/16.90 (i1 := (\<lambda>x. _)(i1 := False, i2 := False), % 25.59/16.90 i2 := (\<lambda>x. _)(i1 := True, i2 := False))) % 25.59/16.90 bnd_topsecret = i2 % 25.59/16.90 bnd_unclassified = i1 % 25.59/16.90 bnd_usa = i2 % 25.59/16.90 bnd_yes = i2 % 25.59/16.90 % SZS output end FiniteModel % 25.59/16.90 Total time: 3.2 s %------------------------------------------------------------------------------