TLC2 Version 2.19 of 08 August 2024 (rev: 5a47802)
Warning: Please run the Java VM which executes TLC with a throughput optimized garbage collector by passing the "-XX:+UseParallelGC" property.
(Use the -nowarning option to disable this warning.)
Running breadth-first search Model-Checking with fp 0 and seed 21 with 1 worker on 1 cores with 494MB heap and 64MB offheap memory [pid: 45069] (Mac OS X 26.7.1 x86_64, Azul Systems, Inc. 17.0.17 x86_64, MSBDiskFPSet, DiskStateQueue).
Parsing file /Users/luchoduran/Sites/open-source-projects/agent-policy-state-machine/formal/Policy.tla
Parsing file /private/var/folders/6x/v56hfn7s5m7gt4t9k54dyg180000gn/T/Naturals.tla
Parsing file /private/var/folders/6x/v56hfn7s5m7gt4t9k54dyg180000gn/T/FiniteSets.tla
Parsing file /private/var/folders/6x/v56hfn7s5m7gt4t9k54dyg180000gn/T/Sequences.tla
Semantic processing of module Naturals
Semantic processing of module Sequences
Semantic processing of module FiniteSets
Semantic processing of module Policy
Starting... (2026-11-09 17:18:40)
Computing initial states...
Finished computing initial states: 1 distinct state generated at 2026-11-09 17:18:40.
Model checking completed. No error has been found.
  Estimates of the probability that TLC did not check all reachable states
  because two distinct states had the same fingerprint:
  calculated (optimistic):  val = 5.2E-15
982 states generated, 109 distinct states found, 0 states left on queue.
The depth of the complete state graph search is 8.
The average outdegree of the complete state graph is 1 (minimum is 0, the maximum 9 and the 95th percentile is 9).
Finished in 00s at (2026-11-09 17:18:40)