TLC2 Version 2026.10.20.183001 (rev: d2e1472)
Running breadth-first search Model-Checking with fp 0 and seed 1 with 1 worker on 2 cores with 491MB heap and 64MB offheap memory [pid: 2777] (Linux 6.8.0-147-generic amd64, Ubuntu 21.0.12.1 64bit, MSBDiskFPSet, DiskStateQueue).
Parsing file /tmp/formal-wiki-model-fwc3d7a5/TraversalTimingMC.tla
Parsing file /tmp/formal-wiki-model-fwc3d7a5/SchedulerChecksMC.tla
Parsing file /tmp/formal-wiki-model-fwc3d7a5/FormalWikiTrace.tla
Parsing file /tmp/formal-wiki-model-fwc3d7a5/AbilityContracts.tla
Parsing file /tmp/formal-wiki-model-fwc3d7a5/SchedulerOracle.tla
Parsing file /tmp/formal-wiki-model-fwc3d7a5/OperationContracts.tla
Parsing file /tmp/formal-wiki-model-fwc3d7a5/InspectionContracts.tla
Parsing file /tmp/formal-wiki-model-fwc3d7a5/TraversalContracts.tla
Parsing file /tmp/formal-wiki-model-fwc3d7a5/TurnContracts.tla
Parsing file /tmp/formal-wiki-model-fwc3d7a5/LocationContracts.tla
Parsing file /tmp/formal-wiki-model-fwc3d7a5/TypeContracts.tla
Parsing file /tmp/formal-wiki-model-fwc3d7a5/SchemaContracts.tla
Parsing file /tmp/formal-wiki-model-fwc3d7a5/BasicContracts.tla
Parsing file /tmp/formal-wiki-model-fwc3d7a5/SetupContracts.tla
Parsing file /tmp/tlc-12686982754678233133/Integers.tla (jar:file:/tmp/formal-wiki-model-fwc3d7a5/tools/tla2tools.jar!/tla2sany/StandardModules/Integers.tla)
Parsing file /tmp/tlc-12686982754678233133/FiniteSets.tla (jar:file:/tmp/formal-wiki-model-fwc3d7a5/tools/tla2tools.jar!/tla2sany/StandardModules/FiniteSets.tla)
Parsing file /tmp/tlc-12686982754678233133/Sequences.tla (jar:file:/tmp/formal-wiki-model-fwc3d7a5/tools/tla2tools.jar!/tla2sany/StandardModules/Sequences.tla)
Parsing file /tmp/tlc-12686982754678233133/Naturals.tla (jar:file:/tmp/formal-wiki-model-fwc3d7a5/tools/tla2tools.jar!/tla2sany/StandardModules/Naturals.tla)
Parsing file /tmp/tlc-12686982754678233133/TLCExt.tla (jar:file:/tmp/formal-wiki-model-fwc3d7a5/tools/tla2tools.jar!/tla2sany/StandardModules/TLCExt.tla)
Parsing file /tmp/tlc-12686982754678233133/TLC.tla (jar:file:/tmp/formal-wiki-model-fwc3d7a5/tools/tla2tools.jar!/tla2sany/StandardModules/TLC.tla)
Semantic processing of module Naturals
Semantic processing of module Integers
Semantic processing of module Sequences
Semantic processing of module FiniteSets
Semantic processing of module BasicContracts
Semantic processing of module SetupContracts
Semantic processing of module SchemaContracts
Semantic processing of module TypeContracts
Semantic processing of module LocationContracts
Semantic processing of module TurnContracts
Semantic processing of module TraversalContracts
Semantic processing of module InspectionContracts
Semantic processing of module OperationContracts
Semantic processing of module AbilityContracts
Semantic processing of module SchedulerOracle
Semantic processing of module SchedulerChecksMC
Semantic processing of module TLC
Semantic processing of module TLCExt
Semantic processing of module FormalWikiTrace
Semantic processing of module TraversalTimingMC
Linting of module BasicContracts
Linting of module SetupContracts
Linting of module SchemaContracts
Linting of module TypeContracts
Linting of module LocationContracts
Linting of module TurnContracts
Linting of module TraversalContracts
Linting of module InspectionContracts
Linting of module OperationContracts
Linting of module AbilityContracts
Linting of module SchedulerOracle
Linting of module SchedulerChecksMC
Linting of module TLCExt
Linting of module FormalWikiTrace
Linting of module TraversalTimingMC
Starting... (2026-10-29 03:53:19)
Loading TraceEmit operator override from FormalWikiTrace with signature: <Java Method: public static tlc2.value.impl.Value FormalWikiTrace.TraceEmit(tlc2.value.impl.Value) throws java.lang.Exception>.
Implied-temporal checking--satisfiability problem has 1 branches.
Computing initial states...
Computed 2 initial states...
Computed 4 initial states...
Computed 8 initial states...
Computed 16 initial states...
Computed 32 initial states...
Finished computing initial states: 56 distinct states generated at 2026-10-29 03:53:20.
Checking temporal properties for the current state space with 5767 total distinct states at (2026-10-29 03:53:23)
Finished checking temporal properties in 00s at 2026-10-29 03:53:23
Progress(152) at 2026-10-29 03:53:23: 5,947 states generated (5,947 s/min), 5,767 distinct states found (5,767 ds/min), 11 states left on queue.
Progress(214) at 2026-10-29 03:53:23: 6,364 states generated, 6,136 distinct states found, 0 states left on queue.
Checking temporal properties for the complete state space with 6136 total distinct states at (2026-10-29 03:53:23)
Finished checking temporal properties in 00s at 2026-10-29 03:53:23
Model checking completed. No error has been found.
  Estimates of the probability that TLC did not check all reachable states
  because two distinct states had the same fingerprint:
  calculated (optimistic):  val = 7.6E-14
6364 states generated, 6136 distinct states found, 0 states left on queue.
The depth of the complete state graph search is 214.
The average outdegree of the complete state graph is 1 (minimum is 0, the maximum 1 and the 95th percentile is 1).
Finished in 05s at (2026-10-29 03:53:23)
