TLC2 Version 2026.10.20.183001 (rev: d2e1472) Running breadth-first search Model-Checking with fp 0 and seed 1 with 1 worker on 2 cores with 491MB heap and 64MB offheap memory [pid: 463] (Linux 6.8.0-147-generic amd64, Ubuntu 21.0.12.1 64bit, MSBDiskFPSet, DiskStateQueue). Parsing file /tmp/formal-wiki-model-_p8g5wm4/ObjectiveChecksMC.tla Parsing file /tmp/formal-wiki-model-_p8g5wm4/RuntimeChecksMC.tla Parsing file /tmp/formal-wiki-model-_p8g5wm4/FormalWikiTrace.tla Parsing file /tmp/formal-wiki-model-_p8g5wm4/ObjectRuntime.tla Parsing file /tmp/formal-wiki-model-_p8g5wm4/BasicContracts.tla Parsing file /tmp/formal-wiki-model-_p8g5wm4/SetupContracts.tla Parsing file /tmp/tlc-15358510460629569648/Integers.tla (jar:file:/tmp/formal-wiki-model-_p8g5wm4/tools/tla2tools.jar!/tla2sany/StandardModules/Integers.tla) Parsing file /tmp/tlc-15358510460629569648/FiniteSets.tla (jar:file:/tmp/formal-wiki-model-_p8g5wm4/tools/tla2tools.jar!/tla2sany/StandardModules/FiniteSets.tla) Parsing file /tmp/tlc-15358510460629569648/Sequences.tla (jar:file:/tmp/formal-wiki-model-_p8g5wm4/tools/tla2tools.jar!/tla2sany/StandardModules/Sequences.tla) Parsing file /tmp/tlc-15358510460629569648/Naturals.tla (jar:file:/tmp/formal-wiki-model-_p8g5wm4/tools/tla2tools.jar!/tla2sany/StandardModules/Naturals.tla) Parsing file /tmp/tlc-15358510460629569648/TLCExt.tla (jar:file:/tmp/formal-wiki-model-_p8g5wm4/tools/tla2tools.jar!/tla2sany/StandardModules/TLCExt.tla) Parsing file /tmp/tlc-15358510460629569648/TLC.tla (jar:file:/tmp/formal-wiki-model-_p8g5wm4/tools/tla2tools.jar!/tla2sany/StandardModules/TLC.tla) Semantic processing of module Naturals Semantic processing of module Integers Semantic processing of module Sequences Semantic processing of module FiniteSets Semantic processing of module BasicContracts Semantic processing of module SetupContracts Semantic processing of module ObjectRuntime Semantic processing of module RuntimeChecksMC Semantic processing of module TLC Semantic processing of module TLCExt Semantic processing of module FormalWikiTrace Semantic processing of module ObjectiveChecksMC Linting of module BasicContracts Linting of module SetupContracts Linting of module ObjectRuntime Linting of module RuntimeChecksMC Linting of module TLCExt Linting of module FormalWikiTrace Linting of module ObjectiveChecksMC Starting... (2026-10-29 03:50:48) Loading TraceEmit operator override from FormalWikiTrace with signature: . Implied-temporal checking--satisfiability problem has 1 branches. Computing initial states... Computed 2 initial states... Computed 4 initial states... Computed 8 initial states... Finished computing initial states: 10 distinct states generated at 2026-10-29 03:50:49. Progress(2) at 2026-10-29 03:50:49: 30 states generated, 20 distinct states found, 0 states left on queue. Checking temporal properties for the complete state space with 20 total distinct states at (2026-10-29 03:50:49) Finished checking temporal properties in 00s at 2026-10-29 03:50:49 Model checking completed. No error has been found. Estimates of the probability that TLC did not check all reachable states because two distinct states had the same fingerprint: calculated (optimistic): val = 1.1E-17 30 states generated, 20 distinct states found, 0 states left on queue. The depth of the complete state graph search is 2. The average outdegree of the complete state graph is 1 (minimum is 0, the maximum 1 and the 95th percentile is 1). Finished in 00s at (2026-10-29 03:50:49)