Application of the composition principle to unity-like specifications：（应用程序的组成原则unity-like规范）.pdfVIP

Application of the Composition Principle to Unity-like Specifications Pierre Collette~ Universit6 Catholique de Louvain, Unit6 dInformatique, Place Sainte-Barbe, B-1348 Louvain-la-Neuve,Belgium Abstract. The problem of composing mutually dependentrely-guarantee speci- ficationsarises in the hierarchicaldevelopmentof reactive or concurrent systems. The composition principle has been proposed as a logic-independent solution to this problem. In this paper, we apply it to Unity-like rely-guarantee specifi- cations. For that purpose, we interpret Unity formulas in Abadi and Lamports compositional model. Then, the premises of the composition rule are reduced to proof obligations that can be carried out in the existing Unity proof system. The approach is illustrated by an example, the composition of mutually dependent specificationsof concurrentbuffers. 1 Introduction Several specification methods [2, 10, 14] for the development of reactive or concurrent systems may be classifiedas rely-guarantee or assumption-commitment methods. Intuiti- vely, a rely-guarantee specification R ~ G states that a system satisfies the guarantee condition G if it operates in an environment that satisfies a rely condition R. We consider specification triples (R, G, Gs) where the safety condition Gs is implied by the full (including liveness) guarantee condition G and R is restricted to a safety condition. Hierarchical specification methods for concurrent systems generally require com- position rules. In the rely-guarantee paradigm, the composition principle of [2, 14] provides a way of combining mutually dependent specifications. If IS] denotes the set of behaviours allowed by a specification S, this principle may be stated as fol