TLC2 Version 2026.10.20.183001 (rev: d2e1472) Running breadth-first search Model-Checking with fp 0 and seed 1 with 1 worker on 2 cores with 491MB heap and 64MB offheap memory [pid: 875] (Linux 6.8.0-147-generic amd64, Ubuntu 21.0.12.1 64bit, MSBDiskFPSet, DiskStateQueue). Parsing file /tmp/formal-wiki-model-udl4b9yl/SetupChecksMC.tla Parsing file /tmp/formal-wiki-model-udl4b9yl/SetupContracts.tla Parsing file /tmp/formal-wiki-model-udl4b9yl/FormalWikiTrace.tla Parsing file /tmp/tlc-16463154000358031287/Integers.tla (jar:file:/tmp/formal-wiki-model-udl4b9yl/tools/tla2tools.jar!/tla2sany/StandardModules/Integers.tla) Parsing file /tmp/tlc-16463154000358031287/FiniteSets.tla (jar:file:/tmp/formal-wiki-model-udl4b9yl/tools/tla2tools.jar!/tla2sany/StandardModules/FiniteSets.tla) Parsing file /tmp/tlc-16463154000358031287/Sequences.tla (jar:file:/tmp/formal-wiki-model-udl4b9yl/tools/tla2tools.jar!/tla2sany/StandardModules/Sequences.tla) Parsing file /tmp/tlc-16463154000358031287/Naturals.tla (jar:file:/tmp/formal-wiki-model-udl4b9yl/tools/tla2tools.jar!/tla2sany/StandardModules/Naturals.tla) Parsing file /tmp/tlc-16463154000358031287/TLCExt.tla (jar:file:/tmp/formal-wiki-model-udl4b9yl/tools/tla2tools.jar!/tla2sany/StandardModules/TLCExt.tla) Parsing file /tmp/tlc-16463154000358031287/TLC.tla (jar:file:/tmp/formal-wiki-model-udl4b9yl/tools/tla2tools.jar!/tla2sany/StandardModules/TLC.tla) Semantic processing of module Naturals Semantic processing of module Integers Semantic processing of module Sequences Semantic processing of module FiniteSets Semantic processing of module SetupContracts Semantic processing of module TLC Semantic processing of module TLCExt Semantic processing of module FormalWikiTrace Semantic processing of module SetupChecksMC Linting of module SetupContracts Linting of module TLCExt Linting of module FormalWikiTrace Linting of module SetupChecksMC Starting... (2026-10-29 03:51:00) Loading TraceEmit operator override from FormalWikiTrace with signature: . Implied-temporal checking--satisfiability problem has 1 branches. Computing initial states... Finished computing initial states: 1 distinct state generated at 2026-10-29 03:51:01. Progress(12) at 2026-10-29 03:51:01: 170 states generated, 134 distinct states found, 0 states left on queue. Checking temporal properties for the complete state space with 134 total distinct states at (2026-10-29 03:51:01) Finished checking temporal properties in 00s at 2026-10-29 03:51:01 Model checking completed. No error has been found. Estimates of the probability that TLC did not check all reachable states because two distinct states had the same fingerprint: calculated (optimistic): val = 2.6E-16 170 states generated, 134 distinct states found, 0 states left on queue. The depth of the complete state graph search is 12. The average outdegree of the complete state graph is 1 (minimum is 0, the maximum 4 and the 95th percentile is 3). Finished in 00s at (2026-10-29 03:51:01)