Leads-to Properties and the But-not-yet Operator.pdfVIP

Leads-to Properties andthe But-not-yet OperatorKen CalvertCollege of ComputingGeorgia Institute of TechnologyAtlanta, Georgia 30032-0280calvert@cc.gatech.eduGIT{CC{93/60October 1993AbstractWe dene a predicate transformer, in terms of which nite disjunctions of leads-toproperties can be rewritten as single leads-to properties. Although disjunctions ofleads-to properties do not typically arise naturally in progress specications, anexample shows how they may be introduced through the use of nested implica-tions of leads-to properties; such implications allow subtle dependencies between aprogra