TLC2 Version 2026.10.20.183001 (rev: d2e1472) Running breadth-first search Model-Checking with fp 0 and seed 1 with 1 worker on 2 cores with 491MB heap and 64MB offheap memory [pid: 1522] (Linux 6.8.0-147-generic amd64, Ubuntu 21.0.12.1 64bit, MSBDiskFPSet, DiskStateQueue). Parsing file /tmp/formal-wiki-model-7zwsn7ol/InspectionProceduresMC.tla Parsing file /tmp/formal-wiki-model-7zwsn7ol/InspectionContracts.tla Parsing file /tmp/formal-wiki-model-7zwsn7ol/FormalWikiTrace.tla Parsing file /tmp/formal-wiki-model-7zwsn7ol/TraversalContracts.tla Parsing file /tmp/formal-wiki-model-7zwsn7ol/TurnContracts.tla Parsing file /tmp/formal-wiki-model-7zwsn7ol/LocationContracts.tla Parsing file /tmp/formal-wiki-model-7zwsn7ol/TypeContracts.tla Parsing file /tmp/formal-wiki-model-7zwsn7ol/SchemaContracts.tla Parsing file /tmp/formal-wiki-model-7zwsn7ol/BasicContracts.tla Parsing file /tmp/formal-wiki-model-7zwsn7ol/SetupContracts.tla Parsing file /tmp/tlc-5833807608731882719/Integers.tla (jar:file:/tmp/formal-wiki-model-7zwsn7ol/tools/tla2tools.jar!/tla2sany/StandardModules/Integers.tla) Parsing file /tmp/tlc-5833807608731882719/FiniteSets.tla (jar:file:/tmp/formal-wiki-model-7zwsn7ol/tools/tla2tools.jar!/tla2sany/StandardModules/FiniteSets.tla) Parsing file /tmp/tlc-5833807608731882719/Sequences.tla (jar:file:/tmp/formal-wiki-model-7zwsn7ol/tools/tla2tools.jar!/tla2sany/StandardModules/Sequences.tla) Parsing file /tmp/tlc-5833807608731882719/Naturals.tla (jar:file:/tmp/formal-wiki-model-7zwsn7ol/tools/tla2tools.jar!/tla2sany/StandardModules/Naturals.tla) Parsing file /tmp/tlc-5833807608731882719/TLCExt.tla (jar:file:/tmp/formal-wiki-model-7zwsn7ol/tools/tla2tools.jar!/tla2sany/StandardModules/TLCExt.tla) Parsing file /tmp/tlc-5833807608731882719/TLC.tla (jar:file:/tmp/formal-wiki-model-7zwsn7ol/tools/tla2tools.jar!/tla2sany/StandardModules/TLC.tla) Semantic processing of module Naturals Semantic processing of module Integers Semantic processing of module Sequences Semantic processing of module FiniteSets Semantic processing of module BasicContracts Semantic processing of module SetupContracts Semantic processing of module SchemaContracts Semantic processing of module TypeContracts Semantic processing of module LocationContracts Semantic processing of module TurnContracts Semantic processing of module TraversalContracts Semantic processing of module InspectionContracts Semantic processing of module TLC Semantic processing of module TLCExt Semantic processing of module FormalWikiTrace Semantic processing of module InspectionProceduresMC Linting of module BasicContracts Linting of module SetupContracts Linting of module SchemaContracts Linting of module TypeContracts Linting of module LocationContracts Linting of module TurnContracts Linting of module TraversalContracts Linting of module InspectionContracts Linting of module TLCExt Linting of module FormalWikiTrace Linting of module InspectionProceduresMC Starting... (2026-10-29 03:51:18) Loading TraceEmit operator override from FormalWikiTrace with signature: . Implied-temporal checking--satisfiability problem has 1 branches. Computing initial states... Computed 2 initial states... Computed 4 initial states... Computed 8 initial states... Computed 16 initial states... Computed 32 initial states... Computed 64 initial states... Computed 128 initial states... Finished computing initial states: 198 distinct states generated at 2026-10-29 03:51:18. Progress(77) at 2026-10-29 03:51:20: 16,017 states generated, 15,493 distinct states found, 0 states left on queue. Checking temporal properties for the complete state space with 15493 total distinct states at (2026-10-29 03:51:20) Finished checking temporal properties in 00s at 2026-10-29 03:51:20 Model checking completed. No error has been found. Estimates of the probability that TLC did not check all reachable states because two distinct states had the same fingerprint: calculated (optimistic): val = 4.4E-13 16017 states generated, 15493 distinct states found, 0 states left on queue. The depth of the complete state graph search is 77. The average outdegree of the complete state graph is 1 (minimum is 0, the maximum 3 and the 95th percentile is 1). Finished in 02s at (2026-10-29 03:51:20)