UP | HOME

ltl2tgta

This tool generates various form of Testing Automata, i.e., automata that observe the changes of atomic propositions, not their values.

Three types of automata can be output. The only output format supported currently is GraphViz's format, with option -8 to enable UTF-8 characters as in other tools.

The --ta option will translate a formula into Testing Automaton, as described by Geldenhuys and Hansen (Spin'06).

Here is the output on a U Gb (we omit the call to dot, as shown while discussing ltl2tgba).

ltl2tgta --ta --multiple-init 'a U Gb'

Sorry, your browser does not support SVG.

As always, the labels of the states have no influence on the language recognized by the automaton. This automaton has three possible initial states. The initial state should be chosen depending on the initial valuation of a and b in the system to be synchronized with this testing automaton. For instance if a is true and b false in the initial state, the testing automaton should start in the state pointed to by the initial arrow labeled a & !b. In the rest of the testing automaton, the transitions are labeled by the sets of atomic propositions that should change in the system for the testing automaton to progress. States with a double enclosure are Büchi accepting, meaning that any execution that visits one of these states is accepting. All states have an implicit self-loop labeled by {}: if the system progress without changing the value of a and b, the testing automaton remains in the same state. Rectangle states are livelock-accepting: any execution of the system that get stuck into one of these state is accepting.

Without the --multiple-init option, a fake initial state is added. This is the default since it often makes the result more readable.

ltl2tgta --ta 'a U Gb'

Sorry, your browser does not support SVG.

The --gba option can be used to request a Generalized Testing Automaton, i.e., a Testing Automaton with Generalized Büchi acceptance. In that case double-enclosures are not used anymore, and Büchi accepting transitions are marked with the same {0,1} notation used in TGBA.

ltl2tgta --gta 'GFa & GFb'

Sorry, your browser does not support SVG.

The interpretation is similar to that of the TA. Execution that stutter in a livelock-accepting (square) state are accepting as well as execution that visit the 0 and 1 acceptance sets infinitely often. Those acceptance sets are carried by transitions, as in TGBAs.

Finally, the default is to output a Transition-based Generalized Testing Automaton 1. In TGTAs, the stuttering states are made explicit with {} self-loops. Since these self-loop can be in acceptance sets, livelock acceptance states are no longer needed.

ltl2tgta 'GFa & GFb'

Sorry, your browser does not support SVG.

Footnotes:

1

: This new class of automata, as well as the implementation of the previous testing automata classes, is part of Ala Eddine BEN SALEM's PhD work, and is discussed in Model checking using generalized testing automata, Ala Eddine Ben Salem, Alexandre Duret-Lutz, and Fabrice Kordon, in Transactions on Petri Nets and Other Models of Concurrency (ToPNoC VI), LNCS 7400, p. 94–112, 2012.