add eventb files for HD

Signed-off-by: Michael Leuschel <leuschel@uni-duesseldorf.de>

HD/m0_mch.eventb

+package(load_event_b_project([event_b_model(none,m0,[sees(none,[m0_implicitContext]),variables(none,[identifier(none,'CS_TopLevel')]),invariant(none,[member(rodinpos(m0,typeof_CS_TopLevel,'_JjEPILR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'CS_TopLevel_STATES'))]),theorems(none,[]),events(none,[event(rodinpos(m0,'INITIALISATION','\''),'INITIALISATION',ordinary(none),[],[],[],[],[assign(rodinpos(m0,init_CS_TopLevel,'_JjCZ8LR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')])],[]),event(rodinpos(m0,'HDSystem_Prepares','_M2qGgKJUEeWzIMhBFfqG3Q'),'HDSystem_Prepares',ordinary(none),[],[],[equal(rodinpos(m0,isin_STANDBY,'_JjCZ8bR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY'))],[],[assign(rodinpos(m0,enter_PREPARATION,'_JjCZ8rR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'PREPARATION')])],[]),event(rodinpos(m0,'HDSystem_Initiates','_M2qtkKJUEeWzIMhBFfqG3Q'),'HDSystem_Initiates',ordinary(none),[],[],[equal(rodinpos(m0,isin_PREPARATION,'_JjCZ87R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION'))],[],[assign(rodinpos(m0,enter_INITIATION,'_JjDBALR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'INITIATION')])],[]),event(rodinpos(m0,'HDSystem_Ends','_M2qtkaJUEeWzIMhBFfqG3Q'),'HDSystem_Ends',ordinary(none),[],[],[equal(rodinpos(m0,isin_INITIATION,'_JjDBAbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'INITIATION'))],[],[assign(rodinpos(m0,enter_ENDING,'_JjDBArR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'ENDING')])],[]),event(rodinpos(m0,'HDSystem_StandsBy','_OIxOoKJUEeWzIMhBFfqG3Q'),'HDSystem_StandsBy',ordinary(none),[],[],[equal(rodinpos(m0,isin_ENDING,'_JjDBA7R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'ENDING'))],[],[assign(rodinpos(m0,enter_STANDBY,'_JjDoELR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')])],[])])])],[event_b_context(none,m0_implicitContext,[extends(none,[]),constants(none,[identifier(none,'HDSystem_PREP'),identifier(none,'INITIATION'),identifier(none,'ENDING'),identifier(none,'HDSystem_END'),identifier(none,'PREPARATION'),identifier(none,'HDSystem_INIT'),identifier(none,'HDSystem_STANDBY'),identifier(none,'STANDBY')]),abstract_constants(none,[]),axioms(none,[member(rodinpos(m0_implicitContext,typeof_STANDBY,'_JjNZELR5EeW1p-Q_lMMcSA'),identifier(none,'STANDBY'),identifier(none,'CS_TopLevel_STATES')),member(rodinpos(m0_implicitContext,typeof_PREPARATION,'_JjNZEbR5EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION'),identifier(none,'CS_TopLevel_STATES')),member(rodinpos(m0_implicitContext,typeof_INITIATION,'_JjNZErR5EeW1p-Q_lMMcSA'),identifier(none,'INITIATION'),identifier(none,'CS_TopLevel_STATES')),member(rodinpos(m0_implicitContext,typeof_ENDING,'_JjOAILR5EeW1p-Q_lMMcSA'),identifier(none,'ENDING'),identifier(none,'CS_TopLevel_STATES')),partition(rodinpos(m0_implicitContext,distinct_states_in_CS_TopLevel_STATES,'_JjOAIbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel_STATES'),[set_extension(none,[identifier(none,'STANDBY')]),set_extension(none,[identifier(none,'PREPARATION')]),set_extension(none,[identifier(none,'INITIATION')]),set_extension(none,[identifier(none,'ENDING')])]),member(rodinpos(m0_implicitContext,typeof_HDSystem_STANDBY,'_637ds6PgEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_STANDBY'),identifier(none,'HDSystem_STATES')),member(rodinpos(m0_implicitContext,typeof_HDSystem_PREP,'_637dtKPgEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_PREP'),identifier(none,'HDSystem_STATES')),member(rodinpos(m0_implicitContext,typeof_HDSystem_INIT,'_638EwKPgEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_INIT'),identifier(none,'HDSystem_STATES')),member(rodinpos(m0_implicitContext,typeof_HDSystem_END,'_638EwaPgEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_END'),identifier(none,'HDSystem_STATES')),partition(rodinpos(m0_implicitContext,distinct_states_in_HDSystem_STATES,'_638EwqPgEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_STATES'),[set_extension(none,[identifier(none,'HDSystem_STANDBY')]),set_extension(none,[identifier(none,'HDSystem_PREP')]),set_extension(none,[identifier(none,'HDSystem_INIT')]),set_extension(none,[identifier(none,'HDSystem_END')])])]),theorems(none,[]),sets(none,[deferred_set(none,'CS_TopLevel_STATES'),deferred_set(none,'HDSystem_STATES')])])],[exporter_version(3)],_Error)).
+

HD/m4_mch.eventb

+package(load_event_b_project([event_b_model(none,m4,[sees(none,[m0_implicitContext,m1_implicitContext,m2_implicitContext,m3_implicitContext,m4_implicitContext]),refines(none,m3),variables(none,[identifier(none,'CS_LL_CF_TESTED_KO'),identifier(none,'CS_TopLevel'),identifier(none,'CS_LL_CF_TESTED_OK'),identifier(none,'CS_LL_CF_NOT_TESTED'),identifier(none,'CS_2_HD_StartsCFTesting'),identifier(none,'HD_2_CS_CFTestingFinished'),identifier(none,'HDMachine_CFTestedOK'),identifier(none,'CS_LL_CF_TESTING'),identifier(none,'INITIATION_sm'),identifier(none,'ENDING_sm'),identifier(none,'PREPARATION_sm')]),invariant(none,[implication(rodinpos(m4,'CS_LowLevel_CFTesting_invariants2','_ZlDgoLVsEeWZYZ7CLrnHEQ'),equal(none,identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none)),equal(none,identifier(none,'HD_2_CS_CFTestingFinished'),boolean_false(none))),implication(rodinpos(m4,'CS_LowLevel_CFTesting_invariants1','_ZlDgobVsEeWZYZ7CLrnHEQ'),equal(none,identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none)),equal(none,identifier(none,'HD_2_CS_CFTestingFinished'),boolean_false(none))),implication(rodinpos(m4,'CS_LowLevel_CFTesting_invariants3','_ZlDgorVsEeWZYZ7CLrnHEQ'),equal(none,identifier(none,'CS_LL_CF_TESTED_KO'),boolean_true(none)),equal(none,identifier(none,'HD_2_CS_CFTestingFinished'),boolean_false(none))),implication(rodinpos(m4,inv1,'_buRZULSPEeW1p-Q_lMMcSX'),equal(none,identifier(none,'CS_2_HD_StartsCFTesting'),boolean_true(none)),equal(none,identifier(none,'CS_LL_CF_TESTING'),boolean_true(none))),implication(rodinpos(m4,inv2,'_buRZULSPEeW1p-Q_lMMcSZ'),equal(none,identifier(none,'HD_2_CS_CFTestingFinished'),boolean_true(none)),equal(none,identifier(none,'CS_2_HD_StartsCFTesting'),boolean_false(none)))]),theorems(none,[]),events(none,[event(rodinpos(m4,'INITIALISATION','_buRZULSPEeW1p-Q_lMMcSC'),'INITIALISATION',ordinary(none),['INITIALISATION'],[],[],[],[assign(rodinpos(m4,init_CS_TopLevel,'_JjCZ8LR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m4,init_PREPARATION_sm,'_ttVsILR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m4,init_INITIATION_sm,'_ttVsIbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m4,init_ENDING_sm,'_ttVsIrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')]),assign(rodinpos(m4,init_CS_LL_CF_NOT_TESTED,'_0fj3gLUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)]),assign(rodinpos(m4,init_CS_LL_CF_TESTING,'_0fj3gbUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m4,init_CS_LL_CF_TESTED_OK,'_0fj3grUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m4,init_CS_LL_CF_TESTED_KO,'_0fj3g7UlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_false(none)]),becomes_element_of(rodinpos(m4,init_HDMachine_CFTestedOK,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none)),assign(rodinpos(m4,act1,'\''),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_false(none)]),assign(rodinpos(m4,act2,'('),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)])],[]),event(rodinpos(m4,'User_PressesOn','_buRZULSPEeW1p-Q_lMMcSD'),'User_PressesOn',ordinary(none),['User_PressesOn'],[],[equal(rodinpos(m4,isin_STANDBY,'_JjCZ8bR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m4,'CS_TopLevel_guards1','_0cjm0LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m4,enter_PREPARATION,'_JjCZ8rR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'PREPARATION')]),assign(rodinpos(m4,enter_CF_TESTING,'_ttVsI7R9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CF_TESTING')])],[]),event(rodinpos(m4,'HDSystem_StartsConnectingPatient','_buRZULSPEeW1p-Q_lMMcSE'),'HDSystem_StartsConnectingPatient',ordinary(none),['HDSystem_StartsConnectingPatient'],[],[equal(rodinpos(m4,isin_PREPARATION,'_JjCZ87R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION')),equal(rodinpos(m4,isin_DIALYZER_RINSING,'_ttVsJLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'DIALYZER_RINSING'))],[],[assign(rodinpos(m4,enter_INITIATION,'_JjDBALR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'INITIATION')]),assign(rodinpos(m4,leave_PREPARATION_sm,'_ttVsJbR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m4,enter_PATIENT_CONNECTING,'_ttVsJrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'PATIENT_CONNECTING')])],[]),event(rodinpos(m4,'HDSystem_StartsReinfusion','_buRZULSPEeW1p-Q_lMMcSF'),'HDSystem_StartsReinfusion',ordinary(none),['HDSystem_StartsReinfusion'],[],[equal(rodinpos(m4,isin_INITIATION,'_JjDBAbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'INITIATION')),equal(rodinpos(m4,isin_THERAPY,'_ttWTMLR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'THERAPY'))],[],[assign(rodinpos(m4,enter_ENDING,'_JjDBArR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'ENDING')]),assign(rodinpos(m4,leave_INITIATION_sm,'_ttWTMbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m4,enter_REINFUSION,'_ttWTMrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'REINFUSION')])],[]),event(rodinpos(m4,'User_PressesOff','_buRZULSPEeW1p-Q_lMMcSG'),'User_PressesOff',ordinary(none),['User_PressesOff'],[],[equal(rodinpos(m4,isin_ENDING,'_JjDBA7R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'ENDING')),equal(rodinpos(m4,isin_THERAPY_OVERVIEWING,'_ttWTM7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'THERAPY_OVERVIEWING'))],[],[assign(rodinpos(m4,enter_STANDBY,'_JjDoELR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m4,leave_ENDING_sm,'_ttWTNLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')])],[]),event(rodinpos(m4,'CS_TopLevel_StartsConnectingConcentrate','_buRZULSPEeW1p-Q_lMMcSH'),'CS_TopLevel_StartsConnectingConcentrate',ordinary(none),['CS_TopLevel_StartsConnectingConcentrate'],[],[equal(rodinpos(m4,isin_CF_TESTING,'_ttW6QLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m4,'PREPARATION_sm_guards1','_0cjm0bUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m4,enter_CONCENTRATE_CONNECTING,'_ttXhULR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CONCENTRATE_CONNECTING')])],[]),event(rodinpos(m4,'HDSystem_StartsSettingRP','_buRZULSPEeW1p-Q_lMMcSI'),'HDSystem_StartsSettingRP',ordinary(none),['HDSystem_StartsSettingRP'],[],[equal(rodinpos(m4,isin_CONCENTRATE_CONNECTING,'_ttXhUbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CONCENTRATE_CONNECTING'))],[],[assign(rodinpos(m4,enter_RP_SETTING,'_ttXhUrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'RP_SETTING')])],[]),event(rodinpos(m4,'HDSystem_StartsPreparingTS','_buRZULSPEeW1p-Q_lMMcSJ'),'HDSystem_StartsPreparingTS',ordinary(none),['HDSystem_StartsPreparingTS'],[],[equal(rodinpos(m4,isin_RP_SETTING,'_ttXhU7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'RP_SETTING'))],[],[assign(rodinpos(m4,enter_TS_PREPARING,'_ttXhVLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TS_PREPARING')])],[]),event(rodinpos(m4,'HDSystem_StartsPreparingHP','_buRZULSPEeW1p-Q_lMMcSK'),'HDSystem_StartsPreparingHP',ordinary(none),['HDSystem_StartsPreparingHP'],[],[equal(rodinpos(m4,isin_TS_PREPARING,'_ttXhVbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TS_PREPARING'))],[],[assign(rodinpos(m4,enter_HP_PREPARING,'_ttYIYLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'HP_PREPARING')])],[]),event(rodinpos(m4,'HDSystem_StartsSettingTP','_buRZULSPEeW1p-Q_lMMcSL'),'HDSystem_StartsSettingTP',ordinary(none),['HDSystem_StartsSettingTP'],[],[equal(rodinpos(m4,isin_HP_PREPARING,'_ttYIYbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'HP_PREPARING'))],[],[assign(rodinpos(m4,enter_TP_SETTING,'_ttYIYrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TP_SETTING')])],[]),event(rodinpos(m4,'HDSystem_StartsRinsingDialyzer','_buRZULSPEeW1p-Q_lMMcSM'),'HDSystem_StartsRinsingDialyzer',ordinary(none),['HDSystem_StartsRinsingDialyzer'],[],[equal(rodinpos(m4,isin_TP_SETTING,'_ttYIY7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TP_SETTING'))],[],[assign(rodinpos(m4,enter_DIALYZER_RINSING,'_ttYIZLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'DIALYZER_RINSING')])],[]),event(rodinpos(m4,'HDSystem_StartsTherapy','_buRZULSPEeW1p-Q_lMMcSN'),'HDSystem_StartsTherapy',ordinary(none),['HDSystem_StartsTherapy'],[],[equal(rodinpos(m4,isin_PATIENT_CONNECTING,'_ttYIZbR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'PATIENT_CONNECTING'))],[],[assign(rodinpos(m4,enter_THERAPY,'_ttYIZrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'THERAPY')])],[]),event(rodinpos(m4,'HDSystem_StartsEmptyingDialyzer','_buRZULSPEeW1p-Q_lMMcSO'),'HDSystem_StartsEmptyingDialyzer',ordinary(none),['HDSystem_StartsEmptyingDialyzer'],[],[equal(rodinpos(m4,isin_REINFUSION,'_ttYvcLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'REINFUSION'))],[],[assign(rodinpos(m4,enter_DIALYZER_EMPTYING,'_ttYvcbR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'DIALYZER_EMPTYING')])],[]),event(rodinpos(m4,'HDSystem_StartsEmptyingCartridge','_buRZULSPEeW1p-Q_lMMcSP'),'HDSystem_StartsEmptyingCartridge',ordinary(none),['HDSystem_StartsEmptyingCartridge'],[],[equal(rodinpos(m4,isin_DIALYZER_EMPTYING,'_ttYvcrR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'DIALYZER_EMPTYING'))],[],[assign(rodinpos(m4,enter_CARTRIDGE_EMPTYING,'_ttYvc7R9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'CARTRIDGE_EMPTYING')])],[]),event(rodinpos(m4,'HDSystem_StartsOverviewingTherapy','_buRZULSPEeW1p-Q_lMMcSQ'),'HDSystem_StartsOverviewingTherapy',ordinary(none),['HDSystem_StartsOverviewingTherapy'],[],[equal(rodinpos(m4,isin_CARTRIDGE_EMPTYING,'_ttYvdLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'CARTRIDGE_EMPTYING'))],[],[assign(rodinpos(m4,enter_THERAPY_OVERVIEWING,'_ttZWgLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'THERAPY_OVERVIEWING')])],[]),event(rodinpos(m4,'CS_LowLevel_StartsTestingCF','_buRZULSPEeW1p-Q_lMMcSR'),'CS_LowLevel_StartsTestingCF',ordinary(none),['CS_LowLevel_StartsTestingCF'],[],[equal(rodinpos(m4,'CS_LowLevel_CFTesting_guards1','_0fmTwLUlEeWNr7Z28XyZAQ'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m4,isin_CS_LL_CF_NOT_TESTED,'_0fmTwbUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m4,leave_CS_LL_CF_NOT_TESTED,'_0fm60LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_false(none)]),assign(rodinpos(m4,enter_CS_LL_CF_TESTING,'_0fm60bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_true(none)]),assign(rodinpos(m4,act1,'('),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_true(none)])],[]),event(rodinpos(m4,'CS_LowLevel_StandsBy','_buRZULSPEeW1p-Q_lMMcSS'),'CS_LowLevel_StandsBy',ordinary(none),['CS_LowLevel_StandsBy'],[],[equal(rodinpos(m4,'CS_LowLevel_CFTesting_guards2','_0fm60rUlEeWNr7Z28XyZAQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m4,isin_CS_LL_CF_TESTED_OK,'_0fm607UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m4,leave_CS_LL_CF_TESTED_OK,'_0fm61LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m4,enter_CS_LL_CF_NOT_TESTED,'_0fm61bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)])],[]),event(rodinpos(m4,'CS_LowLevel_CFTestsOK','_buRZULSPEeW1p-Q_lMMcST'),'CS_LowLevel_CFTestsOK',ordinary(none),['CS_LowLevel_CFTestsOK'],[],[equal(rodinpos(m4,isin_CS_LL_CF_TESTING,'_0fnh4LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m4,'CS_LowLevel_CFTesting_guards3','_P7bT8LVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_true(none)),equal(rodinpos(m4,grd1,'('),identifier(none,'HD_2_CS_CFTestingFinished'),boolean_true(none))],[],[assign(rodinpos(m4,leave_CS_LL_CF_TESTING,'_0fnh4bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m4,enter_CS_LL_CF_TESTED_OK,'_0fnh4rUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_true(none)]),assign(rodinpos(m4,act1,')'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)])],[]),event(rodinpos(m4,'CS_LowLevel_CFTestsKO','_buRZULSPEeW1p-Q_lMMcSU'),'CS_LowLevel_CFTestsKO',ordinary(none),['CS_LowLevel_CFTestsKO'],[],[equal(rodinpos(m4,isin_CS_LL_CF_TESTING,'_0fnh47UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m4,'CS_LowLevel_CFTesting_guards4','_P7bT8bVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_false(none)),equal(rodinpos(m4,grd1,'('),identifier(none,'HD_2_CS_CFTestingFinished'),boolean_true(none))],[],[assign(rodinpos(m4,leave_CS_LL_CF_TESTING,'_0fnh5LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m4,enter_CS_LL_CF_TESTED_KO,'_0fnh5bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_true(none)]),assign(rodinpos(m4,act1,')'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)])],[]),event(rodinpos(m4,'HDMachine_CFTests','_buRZULSPEeW1p-Q_lMMcSV'),'HDMachine_CFTests',ordinary(none),['HDMachine_CFTests'],[],[equal(rodinpos(m4,grd1,'('),identifier(none,'CS_2_HD_StartsCFTesting'),boolean_true(none))],[],[becomes_element_of(rodinpos(m4,act1,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none)),assign(rodinpos(m4,act2,')'),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_false(none)]),assign(rodinpos(m4,act3,'*'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_true(none)])],[])])]),event_b_model(none,m3,[sees(none,[m0_implicitContext,m1_implicitContext,m2_implicitContext,m3_implicitContext]),refines(none,m2),variables(none,[identifier(none,'CS_LL_CF_TESTED_KO'),identifier(none,'CS_TopLevel'),identifier(none,'CS_LL_CF_TESTED_OK'),identifier(none,'CS_LL_CF_NOT_TESTED'),identifier(none,'HDMachine_CFTestedOK'),identifier(none,'CS_LL_CF_TESTING'),identifier(none,'INITIATION_sm'),identifier(none,'ENDING_sm'),identifier(none,'PREPARATION_sm')]),invariant(none,[]),theorems(none,[member(rodinpos(m3,'HDMachine_CFTestedOK_TYPE','_buRZULSPEeW1p-Q_lMMcSC'),identifier(none,'HDMachine_CFTestedOK'),bool_set(none))]),events(none,[event(rodinpos(m3,'INITIALISATION','_bPvj4LSHEeW1p-Q_lMMcSB'),'INITIALISATION',ordinary(none),['INITIALISATION'],[],[],[],[assign(rodinpos(m3,init_CS_TopLevel,'_JjCZ8LR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m3,init_PREPARATION_sm,'_ttVsILR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m3,init_INITIATION_sm,'_ttVsIbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m3,init_ENDING_sm,'_ttVsIrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')]),assign(rodinpos(m3,init_CS_LL_CF_NOT_TESTED,'_0fj3gLUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)]),assign(rodinpos(m3,init_CS_LL_CF_TESTING,'_0fj3gbUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m3,init_CS_LL_CF_TESTED_OK,'_0fj3grUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m3,init_CS_LL_CF_TESTED_KO,'_0fj3g7UlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_false(none)]),becomes_element_of(rodinpos(m3,init_HDMachine_CFTestedOK,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none))],[]),event(rodinpos(m3,'User_PressesOn','_bPvj4LSHEeW1p-Q_lMMcSC'),'User_PressesOn',ordinary(none),['User_PressesOn'],[],[equal(rodinpos(m3,isin_STANDBY,'_JjCZ8bR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m3,'CS_TopLevel_guards1','_0cjm0LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m3,enter_PREPARATION,'_JjCZ8rR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'PREPARATION')]),assign(rodinpos(m3,enter_CF_TESTING,'_ttVsI7R9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CF_TESTING')])],[]),event(rodinpos(m3,'HDSystem_StartsConnectingPatient','_bPvj4LSHEeW1p-Q_lMMcSD'),'HDSystem_StartsConnectingPatient',ordinary(none),['HDSystem_StartsConnectingPatient'],[],[equal(rodinpos(m3,isin_PREPARATION,'_JjCZ87R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION')),equal(rodinpos(m3,isin_DIALYZER_RINSING,'_ttVsJLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'DIALYZER_RINSING'))],[],[assign(rodinpos(m3,enter_INITIATION,'_JjDBALR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'INITIATION')]),assign(rodinpos(m3,leave_PREPARATION_sm,'_ttVsJbR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m3,enter_PATIENT_CONNECTING,'_ttVsJrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'PATIENT_CONNECTING')])],[]),event(rodinpos(m3,'HDSystem_StartsReinfusion','_bPvj4LSHEeW1p-Q_lMMcSE'),'HDSystem_StartsReinfusion',ordinary(none),['HDSystem_StartsReinfusion'],[],[equal(rodinpos(m3,isin_INITIATION,'_JjDBAbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'INITIATION')),equal(rodinpos(m3,isin_THERAPY,'_ttWTMLR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'THERAPY'))],[],[assign(rodinpos(m3,enter_ENDING,'_JjDBArR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'ENDING')]),assign(rodinpos(m3,leave_INITIATION_sm,'_ttWTMbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m3,enter_REINFUSION,'_ttWTMrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'REINFUSION')])],[]),event(rodinpos(m3,'User_PressesOff','_bPvj4LSHEeW1p-Q_lMMcSF'),'User_PressesOff',ordinary(none),['User_PressesOff'],[],[equal(rodinpos(m3,isin_ENDING,'_JjDBA7R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'ENDING')),equal(rodinpos(m3,isin_THERAPY_OVERVIEWING,'_ttWTM7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'THERAPY_OVERVIEWING'))],[],[assign(rodinpos(m3,enter_STANDBY,'_JjDoELR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m3,leave_ENDING_sm,'_ttWTNLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')])],[]),event(rodinpos(m3,'CS_TopLevel_StartsConnectingConcentrate','_bPvj4LSHEeW1p-Q_lMMcSG'),'CS_TopLevel_StartsConnectingConcentrate',ordinary(none),['HDSystem_StartsConnectingConcentrate'],[],[equal(rodinpos(m3,isin_CF_TESTING,'_ttW6QLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m3,'PREPARATION_sm_guards1','_0cjm0bUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m3,enter_CONCENTRATE_CONNECTING,'_ttXhULR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CONCENTRATE_CONNECTING')])],[]),event(rodinpos(m3,'HDSystem_StartsSettingRP','_bPvj4LSHEeW1p-Q_lMMcSH'),'HDSystem_StartsSettingRP',ordinary(none),['HDSystem_StartsSettingRP'],[],[equal(rodinpos(m3,isin_CONCENTRATE_CONNECTING,'_ttXhUbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CONCENTRATE_CONNECTING'))],[],[assign(rodinpos(m3,enter_RP_SETTING,'_ttXhUrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'RP_SETTING')])],[]),event(rodinpos(m3,'HDSystem_StartsPreparingTS','_bPvj4LSHEeW1p-Q_lMMcSI'),'HDSystem_StartsPreparingTS',ordinary(none),['HDSystem_StartsPreparingTS'],[],[equal(rodinpos(m3,isin_RP_SETTING,'_ttXhU7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'RP_SETTING'))],[],[assign(rodinpos(m3,enter_TS_PREPARING,'_ttXhVLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TS_PREPARING')])],[]),event(rodinpos(m3,'HDSystem_StartsPreparingHP','_bPvj4LSHEeW1p-Q_lMMcSJ'),'HDSystem_StartsPreparingHP',ordinary(none),['HDSystem_StartsPreparingHP'],[],[equal(rodinpos(m3,isin_TS_PREPARING,'_ttXhVbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TS_PREPARING'))],[],[assign(rodinpos(m3,enter_HP_PREPARING,'_ttYIYLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'HP_PREPARING')])],[]),event(rodinpos(m3,'HDSystem_StartsSettingTP','_bPvj4LSHEeW1p-Q_lMMcSK'),'HDSystem_StartsSettingTP',ordinary(none),['HDSystem_StartsSettingTP'],[],[equal(rodinpos(m3,isin_HP_PREPARING,'_ttYIYbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'HP_PREPARING'))],[],[assign(rodinpos(m3,enter_TP_SETTING,'_ttYIYrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TP_SETTING')])],[]),event(rodinpos(m3,'HDSystem_StartsRinsingDialyzer','_bPvj4LSHEeW1p-Q_lMMcSL'),'HDSystem_StartsRinsingDialyzer',ordinary(none),['HDSystem_StartsRinsingDialyzer'],[],[equal(rodinpos(m3,isin_TP_SETTING,'_ttYIY7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TP_SETTING'))],[],[assign(rodinpos(m3,enter_DIALYZER_RINSING,'_ttYIZLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'DIALYZER_RINSING')])],[]),event(rodinpos(m3,'HDSystem_StartsTherapy','_bPvj4LSHEeW1p-Q_lMMcSM'),'HDSystem_StartsTherapy',ordinary(none),['HDSystem_StartsTherapy'],[],[equal(rodinpos(m3,isin_PATIENT_CONNECTING,'_ttYIZbR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'PATIENT_CONNECTING'))],[],[assign(rodinpos(m3,enter_THERAPY,'_ttYIZrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'THERAPY')])],[]),event(rodinpos(m3,'HDSystem_StartsEmptyingDialyzer','_bPvj4LSHEeW1p-Q_lMMcSN'),'HDSystem_StartsEmptyingDialyzer',ordinary(none),['HDSystem_StartsEmptyingDialyzer'],[],[equal(rodinpos(m3,isin_REINFUSION,'_ttYvcLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'REINFUSION'))],[],[assign(rodinpos(m3,enter_DIALYZER_EMPTYING,'_ttYvcbR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'DIALYZER_EMPTYING')])],[]),event(rodinpos(m3,'HDSystem_StartsEmptyingCartridge','_bPvj4LSHEeW1p-Q_lMMcSO'),'HDSystem_StartsEmptyingCartridge',ordinary(none),['HDSystem_StartsEmptyingCartridge'],[],[equal(rodinpos(m3,isin_DIALYZER_EMPTYING,'_ttYvcrR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'DIALYZER_EMPTYING'))],[],[assign(rodinpos(m3,enter_CARTRIDGE_EMPTYING,'_ttYvc7R9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'CARTRIDGE_EMPTYING')])],[]),event(rodinpos(m3,'HDSystem_StartsOverviewingTherapy','_bPvj4LSHEeW1p-Q_lMMcSP'),'HDSystem_StartsOverviewingTherapy',ordinary(none),['HDSystem_StartsOverviewingTherapy'],[],[equal(rodinpos(m3,isin_CARTRIDGE_EMPTYING,'_ttYvdLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'CARTRIDGE_EMPTYING'))],[],[assign(rodinpos(m3,enter_THERAPY_OVERVIEWING,'_ttZWgLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'THERAPY_OVERVIEWING')])],[]),event(rodinpos(m3,'CS_LowLevel_StartsTestingCF','_bPvj4LSHEeW1p-Q_lMMcSQ'),'CS_LowLevel_StartsTestingCF',ordinary(none),['CS_LowLevel_StartsTestingCF'],[],[equal(rodinpos(m3,'CS_LowLevel_CFTesting_guards1','_0fmTwLUlEeWNr7Z28XyZAQ'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m3,isin_CS_LL_CF_NOT_TESTED,'_0fmTwbUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m3,leave_CS_LL_CF_NOT_TESTED,'_0fm60LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_false(none)]),assign(rodinpos(m3,enter_CS_LL_CF_TESTING,'_0fm60bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_true(none)])],[]),event(rodinpos(m3,'CS_LowLevel_StandsBy','_bPvj4LSHEeW1p-Q_lMMcSR'),'CS_LowLevel_StandsBy',ordinary(none),['CS_LowLevel_StandsBy'],[],[equal(rodinpos(m3,'CS_LowLevel_CFTesting_guards2','_0fm60rUlEeWNr7Z28XyZAQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m3,isin_CS_LL_CF_TESTED_OK,'_0fm607UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m3,leave_CS_LL_CF_TESTED_OK,'_0fm61LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m3,enter_CS_LL_CF_NOT_TESTED,'_0fm61bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)])],[]),event(rodinpos(m3,'CS_LowLevel_CFTestsOK','_bPvj4LSHEeW1p-Q_lMMcSS'),'CS_LowLevel_CFTestsOK',ordinary(none),['CS_LowLevel_CFTestsOK'],[],[equal(rodinpos(m3,isin_CS_LL_CF_TESTING,'_0fnh4LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m3,'CS_LowLevel_CFTesting_guards3','_P7bT8LVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_true(none))],[],[assign(rodinpos(m3,leave_CS_LL_CF_TESTING,'_0fnh4bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m3,enter_CS_LL_CF_TESTED_OK,'_0fnh4rUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_true(none)])],[]),event(rodinpos(m3,'CS_LowLevel_CFTestsKO','_bPvj4LSHEeW1p-Q_lMMcST'),'CS_LowLevel_CFTestsKO',ordinary(none),['CS_LowLevel_CFTestsKO'],[],[equal(rodinpos(m3,isin_CS_LL_CF_TESTING,'_0fnh47UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m3,'CS_LowLevel_CFTesting_guards4','_P7bT8bVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_false(none))],[],[assign(rodinpos(m3,leave_CS_LL_CF_TESTING,'_0fnh5LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m3,enter_CS_LL_CF_TESTED_KO,'_0fnh5bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_true(none)])],[]),event(rodinpos(m3,'HDMachine_CFTests','_buRZULSPEeW1p-Q_lMMcSD'),'HDMachine_CFTests',ordinary(none),[],[],[equal(rodinpos(m3,grd1,'('),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none))],[],[becomes_element_of(rodinpos(m3,act1,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none))],[])])]),event_b_model(none,m2,[sees(none,[m0_implicitContext,m1_implicitContext,m2_implicitContext]),refines(none,m1),variables(none,[identifier(none,'CS_LL_CF_TESTED_KO'),identifier(none,'CS_TopLevel'),identifier(none,'CS_LL_CF_TESTED_OK'),identifier(none,'CS_LL_CF_NOT_TESTED'),identifier(none,'CS_LL_CF_TESTING'),identifier(none,'INITIATION_sm'),identifier(none,'ENDING_sm'),identifier(none,'PREPARATION_sm')]),invariant(none,[member(rodinpos(m2,typeof_CS_LL_CF_NOT_TESTED,'_0foI8LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),bool_set(none)),member(rodinpos(m2,typeof_CS_LL_CF_TESTING,'_0foI8bUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),bool_set(none)),member(rodinpos(m2,typeof_CS_LL_CF_TESTED_OK,'_0foI8rUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),bool_set(none)),member(rodinpos(m2,typeof_CS_LL_CF_TESTED_KO,'_0foI87UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_KO'),bool_set(none)),partition(rodinpos(m2,distinct_states_in_CS_LowLevel_CFTesting,'_0foI9LUlEeWNr7Z28XyZAQ'),set_extension(none,[boolean_true(none)]),[intersection(none,set_extension(none,[identifier(none,'CS_LL_CF_NOT_TESTED')]),set_extension(none,[boolean_true(none)])),intersection(none,set_extension(none,[identifier(none,'CS_LL_CF_TESTING')]),set_extension(none,[boolean_true(none)])),intersection(none,set_extension(none,[identifier(none,'CS_LL_CF_TESTED_OK')]),set_extension(none,[boolean_true(none)])),intersection(none,set_extension(none,[identifier(none,'CS_LL_CF_TESTED_KO')]),set_extension(none,[boolean_true(none)]))]),implication(rodinpos(m2,'CS_TopLevel_invariants1','_0cn4QbUlEeWNr7Z28XyZAQ'),equal(none,identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION')),implication(none,not_equal(none,identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(none,identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none)))),implication(rodinpos(m2,'CS_TopLevel_invariants2','_0cn4QrUlEeWNr7Z28XyZAQ'),equal(none,identifier(none,'CS_TopLevel'),identifier(none,'INITIATION')),equal(none,identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))),implication(rodinpos(m2,'CS_TopLevel_invariants3','_0cn4Q7UlEeWNr7Z28XyZAQ'),equal(none,identifier(none,'CS_TopLevel'),identifier(none,'ENDING')),equal(none,identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none)))]),theorems(none,[]),events(none,[event(rodinpos(m2,'INITIALISATION','_ttZWhLR9EeW1p-Q_lMMcSB'),'INITIALISATION',ordinary(none),['INITIALISATION'],[],[],[],[assign(rodinpos(m2,init_CS_TopLevel,'_JjCZ8LR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m2,init_PREPARATION_sm,'_ttVsILR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m2,init_INITIATION_sm,'_ttVsIbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m2,init_ENDING_sm,'_ttVsIrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')]),assign(rodinpos(m2,init_CS_LL_CF_NOT_TESTED,'_0fj3gLUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)]),assign(rodinpos(m2,init_CS_LL_CF_TESTING,'_0fj3gbUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m2,init_CS_LL_CF_TESTED_OK,'_0fj3grUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m2,init_CS_LL_CF_TESTED_KO,'_0fj3g7UlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_false(none)])],[]),event(rodinpos(m2,'User_PressesOn','_ttZWhLR9EeW1p-Q_lMMcSC'),'User_PressesOn',ordinary(none),['HDSystem_StartsTestingCF'],[],[equal(rodinpos(m2,isin_STANDBY,'_JjCZ8bR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m2,'CS_TopLevel_guards1','_0cjm0LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m2,enter_PREPARATION,'_JjCZ8rR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'PREPARATION')]),assign(rodinpos(m2,enter_CF_TESTING,'_ttVsI7R9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CF_TESTING')])],[]),event(rodinpos(m2,'HDSystem_StartsConnectingPatient','_ttZWhLR9EeW1p-Q_lMMcSD'),'HDSystem_StartsConnectingPatient',ordinary(none),['HDSystem_StartsConnectingPatient'],[],[equal(rodinpos(m2,isin_PREPARATION,'_JjCZ87R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION')),equal(rodinpos(m2,isin_DIALYZER_RINSING,'_ttVsJLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'DIALYZER_RINSING'))],[],[assign(rodinpos(m2,enter_INITIATION,'_JjDBALR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'INITIATION')]),assign(rodinpos(m2,leave_PREPARATION_sm,'_ttVsJbR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m2,enter_PATIENT_CONNECTING,'_ttVsJrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'PATIENT_CONNECTING')])],[]),event(rodinpos(m2,'HDSystem_StartsReinfusion','_ttZWhLR9EeW1p-Q_lMMcSE'),'HDSystem_StartsReinfusion',ordinary(none),['HDSystem_StartsReinfusion'],[],[equal(rodinpos(m2,isin_INITIATION,'_JjDBAbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'INITIATION')),equal(rodinpos(m2,isin_THERAPY,'_ttWTMLR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'THERAPY'))],[],[assign(rodinpos(m2,enter_ENDING,'_JjDBArR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'ENDING')]),assign(rodinpos(m2,leave_INITIATION_sm,'_ttWTMbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m2,enter_REINFUSION,'_ttWTMrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'REINFUSION')])],[]),event(rodinpos(m2,'User_PressesOff','_ttZWhLR9EeW1p-Q_lMMcSF'),'User_PressesOff',ordinary(none),['HDSystem_StartsStandingBy'],[],[equal(rodinpos(m2,isin_ENDING,'_JjDBA7R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'ENDING')),equal(rodinpos(m2,isin_THERAPY_OVERVIEWING,'_ttWTM7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'THERAPY_OVERVIEWING'))],[],[assign(rodinpos(m2,enter_STANDBY,'_JjDoELR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m2,leave_ENDING_sm,'_ttWTNLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')])],[]),event(rodinpos(m2,'HDSystem_StartsConnectingConcentrate','_ttZWhLR9EeW1p-Q_lMMcSG'),'HDSystem_StartsConnectingConcentrate',ordinary(none),['HDSystem_StartsConnectingConcentrate'],[],[equal(rodinpos(m2,isin_CF_TESTING,'_ttW6QLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m2,'PREPARATION_sm_guards1','_0cjm0bUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m2,enter_CONCENTRATE_CONNECTING,'_ttXhULR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CONCENTRATE_CONNECTING')])],[]),event(rodinpos(m2,'HDSystem_StartsSettingRP','_ttZWhLR9EeW1p-Q_lMMcSH'),'HDSystem_StartsSettingRP',ordinary(none),['HDSystem_StartsSettingRP'],[],[equal(rodinpos(m2,isin_CONCENTRATE_CONNECTING,'_ttXhUbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CONCENTRATE_CONNECTING'))],[],[assign(rodinpos(m2,enter_RP_SETTING,'_ttXhUrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'RP_SETTING')])],[]),event(rodinpos(m2,'HDSystem_StartsPreparingTS','_ttZWhLR9EeW1p-Q_lMMcSI'),'HDSystem_StartsPreparingTS',ordinary(none),['HDSystem_StartsPreparingTS'],[],[equal(rodinpos(m2,isin_RP_SETTING,'_ttXhU7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'RP_SETTING'))],[],[assign(rodinpos(m2,enter_TS_PREPARING,'_ttXhVLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TS_PREPARING')])],[]),event(rodinpos(m2,'HDSystem_StartsPreparingHP','_ttZWhLR9EeW1p-Q_lMMcSJ'),'HDSystem_StartsPreparingHP',ordinary(none),['HDSystem_StartsPreparingHP'],[],[equal(rodinpos(m2,isin_TS_PREPARING,'_ttXhVbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TS_PREPARING'))],[],[assign(rodinpos(m2,enter_HP_PREPARING,'_ttYIYLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'HP_PREPARING')])],[]),event(rodinpos(m2,'HDSystem_StartsSettingTP','_ttZWhLR9EeW1p-Q_lMMcSK'),'HDSystem_StartsSettingTP',ordinary(none),['HDSystem_StartsSettingTP'],[],[equal(rodinpos(m2,isin_HP_PREPARING,'_ttYIYbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'HP_PREPARING'))],[],[assign(rodinpos(m2,enter_TP_SETTING,'_ttYIYrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TP_SETTING')])],[]),event(rodinpos(m2,'HDSystem_StartsRinsingDialyzer','_ttZWhLR9EeW1p-Q_lMMcSL'),'HDSystem_StartsRinsingDialyzer',ordinary(none),['HDSystem_StartsRinsingDialyzer'],[],[equal(rodinpos(m2,isin_TP_SETTING,'_ttYIY7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TP_SETTING'))],[],[assign(rodinpos(m2,enter_DIALYZER_RINSING,'_ttYIZLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'DIALYZER_RINSING')])],[]),event(rodinpos(m2,'HDSystem_StartsTherapy','_ttZWhLR9EeW1p-Q_lMMcSM'),'HDSystem_StartsTherapy',ordinary(none),['HDSystem_StartsTherapy'],[],[equal(rodinpos(m2,isin_PATIENT_CONNECTING,'_ttYIZbR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'PATIENT_CONNECTING'))],[],[assign(rodinpos(m2,enter_THERAPY,'_ttYIZrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'THERAPY')])],[]),event(rodinpos(m2,'HDSystem_StartsEmptyingDialyzer','_ttZWhLR9EeW1p-Q_lMMcSN'),'HDSystem_StartsEmptyingDialyzer',ordinary(none),['HDSystem_StartsEmptyingDialyzer'],[],[equal(rodinpos(m2,isin_REINFUSION,'_ttYvcLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'REINFUSION'))],[],[assign(rodinpos(m2,enter_DIALYZER_EMPTYING,'_ttYvcbR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'DIALYZER_EMPTYING')])],[]),event(rodinpos(m2,'HDSystem_StartsEmptyingCartridge','_ttZWhLR9EeW1p-Q_lMMcSO'),'HDSystem_StartsEmptyingCartridge',ordinary(none),['HDSystem_StartsEmptyingCartridge'],[],[equal(rodinpos(m2,isin_DIALYZER_EMPTYING,'_ttYvcrR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'DIALYZER_EMPTYING'))],[],[assign(rodinpos(m2,enter_CARTRIDGE_EMPTYING,'_ttYvc7R9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'CARTRIDGE_EMPTYING')])],[]),event(rodinpos(m2,'HDSystem_StartsOverviewingTherapy','_ttZWhLR9EeW1p-Q_lMMcSP'),'HDSystem_StartsOverviewingTherapy',ordinary(none),['HDSystem_StartsOverviewingTherapy'],[],[equal(rodinpos(m2,isin_CARTRIDGE_EMPTYING,'_ttYvdLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'CARTRIDGE_EMPTYING'))],[],[assign(rodinpos(m2,enter_THERAPY_OVERVIEWING,'_ttZWgLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'THERAPY_OVERVIEWING')])],[]),event(rodinpos(m2,'CS_LowLevel_StartsTestingCF','_91cCALSGEeW1p-Q_lMMcSA'),'CS_LowLevel_StartsTestingCF',ordinary(none),[],[],[equal(rodinpos(m2,'CS_LowLevel_CFTesting_guards1','_0fmTwLUlEeWNr7Z28XyZAQ'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m2,isin_CS_LL_CF_NOT_TESTED,'_0fmTwbUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m2,leave_CS_LL_CF_NOT_TESTED,'_0fm60LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_false(none)]),assign(rodinpos(m2,enter_CS_LL_CF_TESTING,'_0fm60bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_true(none)])],[]),event(rodinpos(m2,'CS_LowLevel_StandsBy','_91cCAbSGEeW1p-Q_lMMcSA'),'CS_LowLevel_StandsBy',ordinary(none),[],[],[equal(rodinpos(m2,'CS_LowLevel_CFTesting_guards2','_0fm60rUlEeWNr7Z28XyZAQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m2,isin_CS_LL_CF_TESTED_OK,'_0fm607UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m2,leave_CS_LL_CF_TESTED_OK,'_0fm61LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m2,enter_CS_LL_CF_NOT_TESTED,'_0fm61bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)])],[]),event(rodinpos(m2,'CS_LowLevel_CFTestsOK','_91cCArSGEeW1p-Q_lMMcSA'),'CS_LowLevel_CFTestsOK',ordinary(none),[],[],[equal(rodinpos(m2,isin_CS_LL_CF_TESTING,'_0fnh4LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none))],[],[assign(rodinpos(m2,leave_CS_LL_CF_TESTING,'_0fnh4bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m2,enter_CS_LL_CF_TESTED_OK,'_0fnh4rUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_true(none)])],[]),event(rodinpos(m2,'CS_LowLevel_CFTestsKO','_91cCA7SGEeW1p-Q_lMMcSA'),'CS_LowLevel_CFTestsKO',ordinary(none),[],[],[equal(rodinpos(m2,isin_CS_LL_CF_TESTING,'_0fnh47UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none))],[],[assign(rodinpos(m2,leave_CS_LL_CF_TESTING,'_0fnh5LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m2,enter_CS_LL_CF_TESTED_KO,'_0fnh5bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_true(none)])],[])])]),event_b_model(none,m1,[sees(none,[m0_implicitContext,m1_implicitContext]),refines(none,m0),variables(none,[identifier(none,'CS_TopLevel'),identifier(none,'INITIATION_sm'),identifier(none,'ENDING_sm'),identifier(none,'PREPARATION_sm')]),invariant(none,[member(rodinpos(m1,typeof_PREPARATION_sm,'_ttZWhbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1,typeof_INITIATION_sm,'_ttZWhrR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'INITIATION_sm_STATES')),member(rodinpos(m1,typeof_ENDING_sm,'_ttZWh7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'ENDING_sm_STATES')),equivalence(rodinpos(m1,superstateof_PREPARATION_sm,'_ttZWiLR9EeW1p-Q_lMMcSA'),not_equal(none,identifier(none,'PREPARATION_sm'),identifier(none,'PREPARATION_sm_NULL')),equal(none,identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION'))),equivalence(rodinpos(m1,superstateof_INITIATION_sm,'_ttZ9kLR9EeW1p-Q_lMMcSA'),not_equal(none,identifier(none,'INITIATION_sm'),identifier(none,'INITIATION_sm_NULL')),equal(none,identifier(none,'CS_TopLevel'),identifier(none,'INITIATION'))),equivalence(rodinpos(m1,superstateof_ENDING_sm,'_ttZ9kbR9EeW1p-Q_lMMcSA'),not_equal(none,identifier(none,'ENDING_sm'),identifier(none,'ENDING_sm_NULL')),equal(none,identifier(none,'CS_TopLevel'),identifier(none,'ENDING')))]),theorems(none,[]),events(none,[event(rodinpos(m1,'INITIALISATION','_egXkoKJTEeWzIMhBFfqG3R'),'INITIALISATION',ordinary(none),['INITIALISATION'],[],[],[],[assign(rodinpos(m1,init_CS_TopLevel,'_JjCZ8LR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m1,init_PREPARATION_sm,'_ttVsILR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m1,init_INITIATION_sm,'_ttVsIbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m1,init_ENDING_sm,'_ttVsIrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')])],[]),event(rodinpos(m1,'HDSystem_StartsTestingCF','_egXkoKJTEeWzIMhBFfqG3S'),'HDSystem_StartsTestingCF',ordinary(none),['HDSystem_Prepares'],[],[equal(rodinpos(m1,isin_STANDBY,'_JjCZ8bR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY'))],[],[assign(rodinpos(m1,enter_PREPARATION,'_JjCZ8rR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'PREPARATION')]),assign(rodinpos(m1,enter_CF_TESTING,'_ttVsI7R9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CF_TESTING')])],[]),event(rodinpos(m1,'HDSystem_StartsConnectingPatient','_egXkoKJTEeWzIMhBFfqG3T'),'HDSystem_StartsConnectingPatient',ordinary(none),['HDSystem_Initiates'],[],[equal(rodinpos(m1,isin_PREPARATION,'_JjCZ87R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION')),equal(rodinpos(m1,isin_DIALYZER_RINSING,'_ttVsJLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'DIALYZER_RINSING'))],[],[assign(rodinpos(m1,enter_INITIATION,'_JjDBALR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'INITIATION')]),assign(rodinpos(m1,leave_PREPARATION_sm,'_ttVsJbR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m1,enter_PATIENT_CONNECTING,'_ttVsJrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'PATIENT_CONNECTING')])],[]),event(rodinpos(m1,'HDSystem_StartsReinfusion','_egXkoKJTEeWzIMhBFfqG3U'),'HDSystem_StartsReinfusion',ordinary(none),['HDSystem_Ends'],[],[equal(rodinpos(m1,isin_INITIATION,'_JjDBAbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'INITIATION')),equal(rodinpos(m1,isin_THERAPY,'_ttWTMLR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'THERAPY'))],[],[assign(rodinpos(m1,enter_ENDING,'_JjDBArR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'ENDING')]),assign(rodinpos(m1,leave_INITIATION_sm,'_ttWTMbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m1,enter_REINFUSION,'_ttWTMrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'REINFUSION')])],[]),event(rodinpos(m1,'HDSystem_StartsStandingBy','_egXkoKJTEeWzIMhBFfqG3V'),'HDSystem_StartsStandingBy',ordinary(none),['HDSystem_StandsBy'],[],[equal(rodinpos(m1,isin_ENDING,'_JjDBA7R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'ENDING')),equal(rodinpos(m1,isin_THERAPY_OVERVIEWING,'_ttWTM7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'THERAPY_OVERVIEWING'))],[],[assign(rodinpos(m1,enter_STANDBY,'_JjDoELR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m1,leave_ENDING_sm,'_ttWTNLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')])],[]),event(rodinpos(m1,'HDSystem_StartsConnectingConcentrate','_JHqEILQ6EeW1p-Q_lMMcSA'),'HDSystem_StartsConnectingConcentrate',ordinary(none),[],[],[equal(rodinpos(m1,isin_CF_TESTING,'_ttW6QLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING'))],[],[assign(rodinpos(m1,enter_CONCENTRATE_CONNECTING,'_ttXhULR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CONCENTRATE_CONNECTING')])],[]),event(rodinpos(m1,'HDSystem_StartsSettingRP','_XmAkELQ6EeW1p-Q_lMMcSA'),'HDSystem_StartsSettingRP',ordinary(none),[],[],[equal(rodinpos(m1,isin_CONCENTRATE_CONNECTING,'_ttXhUbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CONCENTRATE_CONNECTING'))],[],[assign(rodinpos(m1,enter_RP_SETTING,'_ttXhUrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'RP_SETTING')])],[]),event(rodinpos(m1,'HDSystem_StartsPreparingTS','_hfJzcLQ6EeW1p-Q_lMMcSA'),'HDSystem_StartsPreparingTS',ordinary(none),[],[],[equal(rodinpos(m1,isin_RP_SETTING,'_ttXhU7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'RP_SETTING'))],[],[assign(rodinpos(m1,enter_TS_PREPARING,'_ttXhVLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TS_PREPARING')])],[]),event(rodinpos(m1,'HDSystem_StartsPreparingHP','_oYozwLQ6EeW1p-Q_lMMcSA'),'HDSystem_StartsPreparingHP',ordinary(none),[],[],[equal(rodinpos(m1,isin_TS_PREPARING,'_ttXhVbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TS_PREPARING'))],[],[assign(rodinpos(m1,enter_HP_PREPARING,'_ttYIYLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'HP_PREPARING')])],[]),event(rodinpos(m1,'HDSystem_StartsSettingTP','_xp4T0LR1EeW1p-Q_lMMcSA'),'HDSystem_StartsSettingTP',ordinary(none),[],[],[equal(rodinpos(m1,isin_HP_PREPARING,'_ttYIYbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'HP_PREPARING'))],[],[assign(rodinpos(m1,enter_TP_SETTING,'_ttYIYrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TP_SETTING')])],[]),event(rodinpos(m1,'HDSystem_StartsRinsingDialyzer','_BRMm8LR2EeW1p-Q_lMMcSA'),'HDSystem_StartsRinsingDialyzer',ordinary(none),[],[],[equal(rodinpos(m1,isin_TP_SETTING,'_ttYIY7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TP_SETTING'))],[],[assign(rodinpos(m1,enter_DIALYZER_RINSING,'_ttYIZLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'DIALYZER_RINSING')])],[]),event(rodinpos(m1,'HDSystem_StartsTherapy','_GW8G0LR4EeW1p-Q_lMMcSA'),'HDSystem_StartsTherapy',ordinary(none),[],[],[equal(rodinpos(m1,isin_PATIENT_CONNECTING,'_ttYIZbR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'PATIENT_CONNECTING'))],[],[assign(rodinpos(m1,enter_THERAPY,'_ttYIZrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'THERAPY')])],[]),event(rodinpos(m1,'HDSystem_StartsEmptyingDialyzer','_i1CfILR4EeW1p-Q_lMMcSA'),'HDSystem_StartsEmptyingDialyzer',ordinary(none),[],[],[equal(rodinpos(m1,isin_REINFUSION,'_ttYvcLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'REINFUSION'))],[],[assign(rodinpos(m1,enter_DIALYZER_EMPTYING,'_ttYvcbR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'DIALYZER_EMPTYING')])],[]),event(rodinpos(m1,'HDSystem_StartsEmptyingCartridge','_qVG-ULR4EeW1p-Q_lMMcSA'),'HDSystem_StartsEmptyingCartridge',ordinary(none),[],[],[equal(rodinpos(m1,isin_DIALYZER_EMPTYING,'_ttYvcrR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'DIALYZER_EMPTYING'))],[],[assign(rodinpos(m1,enter_CARTRIDGE_EMPTYING,'_ttYvc7R9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'CARTRIDGE_EMPTYING')])],[]),event(rodinpos(m1,'HDSystem_StartsOverviewingTherapy','_0fo4oLR4EeW1p-Q_lMMcSA'),'HDSystem_StartsOverviewingTherapy',ordinary(none),[],[],[equal(rodinpos(m1,isin_CARTRIDGE_EMPTYING,'_ttYvdLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'CARTRIDGE_EMPTYING'))],[],[assign(rodinpos(m1,enter_THERAPY_OVERVIEWING,'_ttZWgLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'THERAPY_OVERVIEWING')])],[])])]),event_b_model(none,m0,[sees(none,[m0_implicitContext]),variables(none,[identifier(none,'CS_TopLevel')]),invariant(none,[member(rodinpos(m0,typeof_CS_TopLevel,'_JjEPILR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'CS_TopLevel_STATES'))]),theorems(none,[]),events(none,[event(rodinpos(m0,'INITIALISATION','\''),'INITIALISATION',ordinary(none),[],[],[],[],[assign(rodinpos(m0,init_CS_TopLevel,'_JjCZ8LR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')])],[]),event(rodinpos(m0,'HDSystem_Prepares','_M2qGgKJUEeWzIMhBFfqG3Q'),'HDSystem_Prepares',ordinary(none),[],[],[equal(rodinpos(m0,isin_STANDBY,'_JjCZ8bR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY'))],[],[assign(rodinpos(m0,enter_PREPARATION,'_JjCZ8rR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'PREPARATION')])],[]),event(rodinpos(m0,'HDSystem_Initiates','_M2qtkKJUEeWzIMhBFfqG3Q'),'HDSystem_Initiates',ordinary(none),[],[],[equal(rodinpos(m0,isin_PREPARATION,'_JjCZ87R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION'))],[],[assign(rodinpos(m0,enter_INITIATION,'_JjDBALR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'INITIATION')])],[]),event(rodinpos(m0,'HDSystem_Ends','_M2qtkaJUEeWzIMhBFfqG3Q'),'HDSystem_Ends',ordinary(none),[],[],[equal(rodinpos(m0,isin_INITIATION,'_JjDBAbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'INITIATION'))],[],[assign(rodinpos(m0,enter_ENDING,'_JjDBArR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'ENDING')])],[]),event(rodinpos(m0,'HDSystem_StandsBy','_OIxOoKJUEeWzIMhBFfqG3Q'),'HDSystem_StandsBy',ordinary(none),[],[],[equal(rodinpos(m0,isin_ENDING,'_JjDBA7R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'ENDING'))],[],[assign(rodinpos(m0,enter_STANDBY,'_JjDoELR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')])],[])])])],[event_b_context(none,m0_implicitContext,[extends(none,[]),constants(none,[identifier(none,'HDSystem_PREP'),identifier(none,'INITIATION'),identifier(none,'ENDING'),identifier(none,'HDSystem_END'),identifier(none,'PREPARATION'),identifier(none,'HDSystem_INIT'),identifier(none,'HDSystem_STANDBY'),identifier(none,'STANDBY')]),abstract_constants(none,[]),axioms(none,[member(rodinpos(m0_implicitContext,typeof_STANDBY,'_JjNZELR5EeW1p-Q_lMMcSA'),identifier(none,'STANDBY'),identifier(none,'CS_TopLevel_STATES')),member(rodinpos(m0_implicitContext,typeof_PREPARATION,'_JjNZEbR5EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION'),identifier(none,'CS_TopLevel_STATES')),member(rodinpos(m0_implicitContext,typeof_INITIATION,'_JjNZErR5EeW1p-Q_lMMcSA'),identifier(none,'INITIATION'),identifier(none,'CS_TopLevel_STATES')),member(rodinpos(m0_implicitContext,typeof_ENDING,'_JjOAILR5EeW1p-Q_lMMcSA'),identifier(none,'ENDING'),identifier(none,'CS_TopLevel_STATES')),partition(rodinpos(m0_implicitContext,distinct_states_in_CS_TopLevel_STATES,'_JjOAIbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel_STATES'),[set_extension(none,[identifier(none,'STANDBY')]),set_extension(none,[identifier(none,'PREPARATION')]),set_extension(none,[identifier(none,'INITIATION')]),set_extension(none,[identifier(none,'ENDING')])]),member(rodinpos(m0_implicitContext,typeof_HDSystem_STANDBY,'_637ds6PgEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_STANDBY'),identifier(none,'HDSystem_STATES')),member(rodinpos(m0_implicitContext,typeof_HDSystem_PREP,'_637dtKPgEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_PREP'),identifier(none,'HDSystem_STATES')),member(rodinpos(m0_implicitContext,typeof_HDSystem_INIT,'_638EwKPgEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_INIT'),identifier(none,'HDSystem_STATES')),member(rodinpos(m0_implicitContext,typeof_HDSystem_END,'_638EwaPgEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_END'),identifier(none,'HDSystem_STATES')),partition(rodinpos(m0_implicitContext,distinct_states_in_HDSystem_STATES,'_638EwqPgEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_STATES'),[set_extension(none,[identifier(none,'HDSystem_STANDBY')]),set_extension(none,[identifier(none,'HDSystem_PREP')]),set_extension(none,[identifier(none,'HDSystem_INIT')]),set_extension(none,[identifier(none,'HDSystem_END')])])]),theorems(none,[]),sets(none,[deferred_set(none,'CS_TopLevel_STATES'),deferred_set(none,'HDSystem_STATES')])]),event_b_context(none,m1_implicitContext,[extends(none,[m0_implicitContext]),constants(none,[identifier(none,'PREPARATION_sm_NULL'),identifier(none,'HDSystem_Testing'),identifier(none,'HDSystem_EmptyingDialyzer'),identifier(none,'ENDING_sm_NULL'),identifier(none,'HDSystem_EmptyingCartridge'),identifier(none,'HDSystem_DisplayingOverview'),identifier(none,'THERAPY'),identifier(none,'HDSystem_RinsingDialyzer'),identifier(none,'HDSystem_PreparingHP'),identifier(none,'HDSystem_Reinfusion'),identifier(none,'TS_PREPARING'),identifier(none,'HDSystem_ConnectingPatient'),identifier(none,'TP_SETTING'),identifier(none,'DIALYZER_EMPTYING'),identifier(none,'THERAPY_OVERVIEWING'),identifier(none,'CONCENTRATE_CONNECTING'),identifier(none,'HDSystem_SettingTreatmentParameters'),identifier(none,'INITIATION_sm_NULL'),identifier(none,'CARTRIDGE_EMPTYING'),identifier(none,'HDSystem_END_sm_NULL'),identifier(none,'HDSystem_ConnectingConcentrate'),identifier(none,'HDSystem_Therapy'),identifier(none,'CF_TESTING'),identifier(none,'HDSystem_INIT_sm_NULL'),identifier(none,'PATIENT_CONNECTING'),identifier(none,'HDSystem_PreparingTubingSystem'),identifier(none,'REINFUSION'),identifier(none,'HP_PREPARING'),identifier(none,'HDSystem_PREP_sm_NULL'),identifier(none,'DIALYZER_RINSING'),identifier(none,'RP_SETTING'),identifier(none,'HDSystem_SettingRinsingParameters')]),abstract_constants(none,[]),axioms(none,[member(rodinpos(m1_implicitContext,typeof_PREPARATION_sm_NULL,'_tth5YLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm_NULL'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_INITIATION_sm_NULL,'_ttigcLR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm_NULL'),identifier(none,'INITIATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_ENDING_sm_NULL,'_ttigcbR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm_NULL'),identifier(none,'ENDING_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_CF_TESTING,'_ttigcrR9EeW1p-Q_lMMcSA'),identifier(none,'CF_TESTING'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_CONCENTRATE_CONNECTING,'_ttigc7R9EeW1p-Q_lMMcSA'),identifier(none,'CONCENTRATE_CONNECTING'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_RP_SETTING,'_ttigdLR9EeW1p-Q_lMMcSA'),identifier(none,'RP_SETTING'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_TS_PREPARING,'_ttigdbR9EeW1p-Q_lMMcSA'),identifier(none,'TS_PREPARING'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HP_PREPARING,'_ttigdrR9EeW1p-Q_lMMcSA'),identifier(none,'HP_PREPARING'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_TP_SETTING,'_ttigd7R9EeW1p-Q_lMMcSA'),identifier(none,'TP_SETTING'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_DIALYZER_RINSING,'_ttjHgLR9EeW1p-Q_lMMcSA'),identifier(none,'DIALYZER_RINSING'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_PATIENT_CONNECTING,'_ttjHgbR9EeW1p-Q_lMMcSA'),identifier(none,'PATIENT_CONNECTING'),identifier(none,'INITIATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_THERAPY,'_ttjHgrR9EeW1p-Q_lMMcSA'),identifier(none,'THERAPY'),identifier(none,'INITIATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_REINFUSION,'_ttjHg7R9EeW1p-Q_lMMcSA'),identifier(none,'REINFUSION'),identifier(none,'ENDING_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_DIALYZER_EMPTYING,'_ttjHhLR9EeW1p-Q_lMMcSA'),identifier(none,'DIALYZER_EMPTYING'),identifier(none,'ENDING_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_CARTRIDGE_EMPTYING,'_ttjHhbR9EeW1p-Q_lMMcSA'),identifier(none,'CARTRIDGE_EMPTYING'),identifier(none,'ENDING_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_THERAPY_OVERVIEWING,'_ttjukLR9EeW1p-Q_lMMcSA'),identifier(none,'THERAPY_OVERVIEWING'),identifier(none,'ENDING_sm_STATES')),partition(rodinpos(m1_implicitContext,distinct_states_in_PREPARATION_sm_STATES,'_ttjukbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm_STATES'),[set_extension(none,[identifier(none,'CF_TESTING')]),set_extension(none,[identifier(none,'CONCENTRATE_CONNECTING')]),set_extension(none,[identifier(none,'RP_SETTING')]),set_extension(none,[identifier(none,'TS_PREPARING')]),set_extension(none,[identifier(none,'HP_PREPARING')]),set_extension(none,[identifier(none,'TP_SETTING')]),set_extension(none,[identifier(none,'DIALYZER_RINSING')]),set_extension(none,[identifier(none,'PREPARATION_sm_NULL')])]),partition(rodinpos(m1_implicitContext,distinct_states_in_INITIATION_sm_STATES,'_ttjukrR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm_STATES'),[set_extension(none,[identifier(none,'PATIENT_CONNECTING')]),set_extension(none,[identifier(none,'THERAPY')]),set_extension(none,[identifier(none,'INITIATION_sm_NULL')])]),partition(rodinpos(m1_implicitContext,distinct_states_in_ENDING_sm_STATES,'_ttjuk7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm_STATES'),[set_extension(none,[identifier(none,'REINFUSION')]),set_extension(none,[identifier(none,'DIALYZER_EMPTYING')]),set_extension(none,[identifier(none,'CARTRIDGE_EMPTYING')]),set_extension(none,[identifier(none,'THERAPY_OVERVIEWING')]),set_extension(none,[identifier(none,'ENDING_sm_NULL')])]),member(rodinpos(m1_implicitContext,typeof_HDSystem_PREP_sm_NULL,'_IYzzUqPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_PREP_sm_NULL'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_INIT_sm_NULL,'_IYzzU6PiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_INIT_sm_NULL'),identifier(none,'HDSystem_INIT_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_END_sm_NULL,'_IYzzVKPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_END_sm_NULL'),identifier(none,'HDSystem_END_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_Testing,'_IYzzVaPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_Testing'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_ConnectingConcentrate,'_IYzzVqPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_ConnectingConcentrate'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_SettingRinsingParameters,'_IYzzV6PiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_SettingRinsingParameters'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_PreparingTubingSystem,'_IYzzWKPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_PreparingTubingSystem'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_PreparingHP,'_IY0aYKPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_PreparingHP'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_SettingTreatmentParameters,'_IY0aYaPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_SettingTreatmentParameters'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_RinsingDialyzer,'_IY0aYqPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_RinsingDialyzer'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_ConnectingPatient,'_IY0aY6PiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_ConnectingPatient'),identifier(none,'HDSystem_INIT_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_Therapy,'_IY0aZKPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_Therapy'),identifier(none,'HDSystem_INIT_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_Reinfusion,'_IY0aZaPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_Reinfusion'),identifier(none,'HDSystem_END_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_EmptyingDialyzer,'_IY0aZqPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_EmptyingDialyzer'),identifier(none,'HDSystem_END_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_EmptyingCartridge,'_IY0aZ6PiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_EmptyingCartridge'),identifier(none,'HDSystem_END_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_DisplayingOverview,'_IY1BcKPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_DisplayingOverview'),identifier(none,'HDSystem_END_sm_STATES')),partition(rodinpos(m1_implicitContext,distinct_states_in_HDSystem_PREP_sm_STATES,'_IY1BcaPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_PREP_sm_STATES'),[set_extension(none,[identifier(none,'HDSystem_Testing')]),set_extension(none,[identifier(none,'HDSystem_ConnectingConcentrate')]),set_extension(none,[identifier(none,'HDSystem_SettingRinsingParameters')]),set_extension(none,[identifier(none,'HDSystem_PreparingTubingSystem')]),set_extension(none,[identifier(none,'HDSystem_PreparingHP')]),set_extension(none,[identifier(none,'HDSystem_SettingTreatmentParameters')]),set_extension(none,[identifier(none,'HDSystem_RinsingDialyzer')]),set_extension(none,[identifier(none,'HDSystem_PREP_sm_NULL')])]),partition(rodinpos(m1_implicitContext,distinct_states_in_HDSystem_INIT_sm_STATES,'_IY1BcqPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_INIT_sm_STATES'),[set_extension(none,[identifier(none,'HDSystem_ConnectingPatient')]),set_extension(none,[identifier(none,'HDSystem_Therapy')]),set_extension(none,[identifier(none,'HDSystem_INIT_sm_NULL')])]),partition(rodinpos(m1_implicitContext,distinct_states_in_HDSystem_END_sm_STATES,'_IY1Bc6PiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_END_sm_STATES'),[set_extension(none,[identifier(none,'HDSystem_Reinfusion')]),set_extension(none,[identifier(none,'HDSystem_EmptyingDialyzer')]),set_extension(none,[identifier(none,'HDSystem_EmptyingCartridge')]),set_extension(none,[identifier(none,'HDSystem_DisplayingOverview')]),set_extension(none,[identifier(none,'HDSystem_END_sm_NULL')])])]),theorems(none,[]),sets(none,[deferred_set(none,'HDSystem_PREP_sm_STATES'),deferred_set(none,'PREPARATION_sm_STATES'),deferred_set(none,'ENDING_sm_STATES'),deferred_set(none,'INITIATION_sm_STATES'),deferred_set(none,'HDSystem_END_sm_STATES'),deferred_set(none,'HDSystem_INIT_sm_STATES')])]),event_b_context(none,m2_implicitContext,[extends(none,[m1_implicitContext]),constants(none,[]),abstract_constants(none,[]),axioms(none,[]),theorems(none,[]),sets(none,[])]),event_b_context(none,m3_implicitContext,[extends(none,[m2_implicitContext]),constants(none,[]),abstract_constants(none,[]),axioms(none,[]),theorems(none,[]),sets(none,[])]),event_b_context(none,m4_implicitContext,[extends(none,[m3_implicitContext]),constants(none,[]),abstract_constants(none,[]),axioms(none,[]),theorems(none,[]),sets(none,[])])],[exporter_version(3),po(m4,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('CS_LowLevel_CFTesting_invariants2')],true),po(m4,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('CS_LowLevel_CFTesting_invariants1')],true),po(m4,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('CS_LowLevel_CFTesting_invariants3')],true),po(m4,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(inv1)],true),po(m4,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(inv2)],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_StartsTestingCF'),event('CS_LowLevel_StartsTestingCF'),invariant('CS_LowLevel_CFTesting_invariants2')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_StartsTestingCF'),event('CS_LowLevel_StartsTestingCF'),invariant(inv1)],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_StartsTestingCF'),event('CS_LowLevel_StartsTestingCF'),invariant(inv2)],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_StandsBy'),event('CS_LowLevel_StandsBy'),invariant('CS_LowLevel_CFTesting_invariants2')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_StandsBy'),event('CS_LowLevel_StandsBy'),invariant('CS_LowLevel_CFTesting_invariants1')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),event('CS_LowLevel_CFTestsOK'),invariant('CS_LowLevel_CFTesting_invariants2')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),event('CS_LowLevel_CFTestsOK'),invariant('CS_LowLevel_CFTesting_invariants1')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),event('CS_LowLevel_CFTestsOK'),invariant('CS_LowLevel_CFTesting_invariants3')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),event('CS_LowLevel_CFTestsOK'),invariant(inv1)],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),event('CS_LowLevel_CFTestsOK'),invariant(inv2)],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsKO'),event('CS_LowLevel_CFTestsKO'),invariant('CS_LowLevel_CFTesting_invariants2')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsKO'),event('CS_LowLevel_CFTestsKO'),invariant('CS_LowLevel_CFTesting_invariants1')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsKO'),event('CS_LowLevel_CFTestsKO'),invariant('CS_LowLevel_CFTesting_invariants3')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsKO'),event('CS_LowLevel_CFTestsKO'),invariant(inv1)],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsKO'),event('CS_LowLevel_CFTestsKO'),invariant(inv2)],true),po(m4,'Invariant  preservation',[event('HDMachine_CFTests'),event('HDMachine_CFTests'),invariant('CS_LowLevel_CFTesting_invariants2')],true),po(m4,'Invariant  preservation',[event('HDMachine_CFTests'),event('HDMachine_CFTests'),invariant('CS_LowLevel_CFTesting_invariants1')],true),po(m4,'Invariant  preservation',[event('HDMachine_CFTests'),event('HDMachine_CFTests'),invariant('CS_LowLevel_CFTesting_invariants3')],true),po(m4,'Invariant  preservation',[event('HDMachine_CFTests'),event('HDMachine_CFTests'),invariant(inv1)],true),po(m4,'Invariant  preservation',[event('HDMachine_CFTests'),event('HDMachine_CFTests'),invariant(inv2)],true),po(m4,'Guard strengthening (split)',[event('HDMachine_CFTests'),guard(grd1),event('HDMachine_CFTests'),event('HDMachine_CFTests')],true),po(m3,'Feasibility of action',[action(init_HDMachine_CFTestedOK)],true),po(m3,'Feasibility of action',[action(act1)],true),po(m2,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(distinct_states_in_CS_LowLevel_CFTesting)],true),po(m2,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('CS_TopLevel_invariants2')],true),po(m2,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('CS_TopLevel_invariants3')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsTestingCF'),event('User_PressesOn'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsTestingCF'),event('User_PressesOn'),invariant('CS_TopLevel_invariants2')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsTestingCF'),event('User_PressesOn'),invariant('CS_TopLevel_invariants3')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsConnectingPatient'),event('HDSystem_StartsConnectingPatient'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsConnectingPatient'),event('HDSystem_StartsConnectingPatient'),invariant('CS_TopLevel_invariants2')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsConnectingPatient'),event('HDSystem_StartsConnectingPatient'),invariant('CS_TopLevel_invariants3')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsReinfusion'),event('HDSystem_StartsReinfusion'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsReinfusion'),event('HDSystem_StartsReinfusion'),invariant('CS_TopLevel_invariants2')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsReinfusion'),event('HDSystem_StartsReinfusion'),invariant('CS_TopLevel_invariants3')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsStandingBy'),event('User_PressesOff'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsStandingBy'),event('User_PressesOff'),invariant('CS_TopLevel_invariants2')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsStandingBy'),event('User_PressesOff'),invariant('CS_TopLevel_invariants3')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsConnectingConcentrate'),event('HDSystem_StartsConnectingConcentrate'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsSettingRP'),event('HDSystem_StartsSettingRP'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsPreparingTS'),event('HDSystem_StartsPreparingTS'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsPreparingHP'),event('HDSystem_StartsPreparingHP'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsSettingTP'),event('HDSystem_StartsSettingTP'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsRinsingDialyzer'),event('HDSystem_StartsRinsingDialyzer'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_StartsTestingCF'),invariant(distinct_states_in_CS_LowLevel_CFTesting)],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_StandsBy'),invariant(distinct_states_in_CS_LowLevel_CFTesting)],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_StandsBy'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_StandsBy'),invariant('CS_TopLevel_invariants2')],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_StandsBy'),invariant('CS_TopLevel_invariants3')],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),invariant(distinct_states_in_CS_LowLevel_CFTesting)],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),invariant('CS_TopLevel_invariants2')],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),invariant('CS_TopLevel_invariants3')],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_CFTestsKO'),invariant(distinct_states_in_CS_LowLevel_CFTesting)],true),po(m1,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(superstateof_INITIATION_sm)],true),po(m1,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(superstateof_ENDING_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Prepares'),event('HDSystem_StartsTestingCF'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Prepares'),event('HDSystem_StartsTestingCF'),invariant(superstateof_INITIATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Prepares'),event('HDSystem_StartsTestingCF'),invariant(superstateof_ENDING_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Initiates'),event('HDSystem_StartsConnectingPatient'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Initiates'),event('HDSystem_StartsConnectingPatient'),invariant(superstateof_INITIATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Initiates'),event('HDSystem_StartsConnectingPatient'),invariant(superstateof_ENDING_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Ends'),event('HDSystem_StartsReinfusion'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Ends'),event('HDSystem_StartsReinfusion'),invariant(superstateof_INITIATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Ends'),event('HDSystem_StartsReinfusion'),invariant(superstateof_ENDING_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StandsBy'),event('HDSystem_StartsStandingBy'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StandsBy'),event('HDSystem_StartsStandingBy'),invariant(superstateof_INITIATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StandsBy'),event('HDSystem_StartsStandingBy'),invariant(superstateof_ENDING_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsConnectingConcentrate'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsSettingRP'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsPreparingTS'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsPreparingHP'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsSettingTP'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsRinsingDialyzer'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsTherapy'),invariant(superstateof_INITIATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsEmptyingDialyzer'),invariant(superstateof_ENDING_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsEmptyingCartridge'),invariant(superstateof_ENDING_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsOverviewingTherapy'),invariant(superstateof_ENDING_sm)],true)],_Error)).
+

HD/m8_mch.eventb

+package(load_event_b_project([event_b_model(none,m8,[sees(none,[m0_implicitContext,m1_implicitContext,m2_implicitContext,m3_implicitContext,m4_implicitContext,m5_implicitContext,m6_implicitContext,m7_implicitContext,m8_implicitContext,'c5-signals','c6-CFTestingSignal','c7-concentrates','c8-rinsing_parameters']),refines(none,m7),variables(none,[identifier(none,fillingBPVolume),identifier(none,signal_status),identifier(none,'UFRinsingRate'),identifier(none,'CS_LL_CF_TESTED_KO'),identifier(none,'CS_TopLevel'),identifier(none,'CS_LL_CF_TESTED_OK'),identifier(none,'CF_TESTING_sm'),identifier(none,'CS_LL_CF_NOT_TESTED'),identifier(none,'UFRinsingVolume'),identifier(none,connected_concentrate),identifier(none,'CS_2_HD_StartsCFTesting'),identifier(none,'HD_2_CS_CFTestingFinished'),identifier(none,'HDMachine_CFTestedOK'),identifier(none,'DFFlow'),identifier(none,'CS_LL_CF_TESTING'),identifier(none,'INITIATION_sm'),identifier(none,bloodFlow),identifier(none,fillingBPRate),identifier(none,'ENDING_sm'),identifier(none,'PREPARATION_sm'),identifier(none,rinsingBPRate)]),invariant(none,[member(rodinpos(m8,fillingBPRate_TYPE,inv1),identifier(none,fillingBPRate),identifier(none,'FILLING_BP_RATE_RANGE')),member(rodinpos(m8,fillingBPVolume_TYPE,inv2),identifier(none,fillingBPVolume),identifier(none,'FILLING_BP_VOLUME_RANGE')),member(rodinpos(m8,rinsingBPRate_TYPE,inv3),identifier(none,rinsingBPRate),identifier(none,'RINSING_BP_RATE_RANGE')),member(rodinpos(m8,'DFFlow_TYPE',inv4),identifier(none,'DFFlow'),identifier(none,'DF_FLOW_RANGE')),member(rodinpos(m8,'UFRinsingRate_TYPE',inv5),identifier(none,'UFRinsingRate'),identifier(none,'UF_RINSING_RATE_RANGE')),member(rodinpos(m8,'UFRinsingVolume_TYPE',inv6),identifier(none,'UFRinsingVolume'),identifier(none,'UF_RINSING_VOLUME_RANGE')),member(rodinpos(m8,bloodFlow_TYPE,inv7),identifier(none,bloodFlow),identifier(none,'BLOOD_FLOW_RANGE'))]),theorems(none,[]),events(none,[event(rodinpos(m8,'INITIALISATION','_uXHVwLUpEeWNr7Z28XyZBP'),'INITIALISATION',ordinary(none),['INITIALISATION'],[],[],[],[assign(rodinpos(m8,init_CS_TopLevel,'_JjCZ8LR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m8,init_PREPARATION_sm,'_ttVsILR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m8,init_INITIATION_sm,'_ttVsIbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m8,init_ENDING_sm,'_ttVsIrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')]),assign(rodinpos(m8,init_CS_LL_CF_NOT_TESTED,'_0fj3gLUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)]),assign(rodinpos(m8,init_CS_LL_CF_TESTING,'_0fj3gbUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m8,init_CS_LL_CF_TESTED_OK,'_0fj3grUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m8,init_CS_LL_CF_TESTED_KO,'_0fj3g7UlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_false(none)]),becomes_element_of(rodinpos(m8,init_HDMachine_CFTestedOK,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none)),assign(rodinpos(m8,act1,'\''),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_false(none)]),assign(rodinpos(m8,act2,'('),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)]),assign(rodinpos(m8,init_signal_status,'_ycAIcLhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[cartesian_product(none,identifier(none,'SIGNAL'),set_extension(none,[identifier(none,'SIGNAL_OFF')]))]),assign(rodinpos(m8,init_CF_TESTING_sm,'_QbbeorkaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_sm_NULL')]),assign(rodinpos(m8,init_connected_concentrate,'\''),[identifier(none,connected_concentrate)],[identifier(none,'CONCENTRATE_NONE')]),becomes_element_of(rodinpos(m8,init_fillingBPRate,act1),[identifier(none,fillingBPRate)],identifier(none,'FILLING_BP_RATE_RANGE')),becomes_element_of(rodinpos(m8,init_fillingBPVolume,act2),[identifier(none,fillingBPVolume)],identifier(none,'FILLING_BP_VOLUME_RANGE')),becomes_element_of(rodinpos(m8,init_risingBPRate,act3),[identifier(none,rinsingBPRate)],identifier(none,'RINSING_BP_RATE_RANGE')),becomes_element_of(rodinpos(m8,init_DFFlow,act4),[identifier(none,'DFFlow')],identifier(none,'DF_FLOW_RANGE')),becomes_element_of(rodinpos(m8,init_UFRinsingRate,act5),[identifier(none,'UFRinsingRate')],identifier(none,'UF_RINSING_RATE_RANGE')),becomes_element_of(rodinpos(m8,init_UFRinsingVolume,act6),[identifier(none,'UFRinsingVolume')],identifier(none,'UF_RINSING_VOLUME_RANGE')),becomes_element_of(rodinpos(m8,init_bloodFlow,act7),[identifier(none,bloodFlow)],identifier(none,'BLOOD_FLOW_RANGE'))],[]),event(rodinpos(m8,'User_PressesOn','_uXHVwLUpEeWNr7Z28XyZBQ'),'User_PressesOn',ordinary(none),['User_PressesOn'],[],[equal(rodinpos(m8,isin_STANDBY,'_JjCZ8bR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m8,'CS_TopLevel_guards1','_0cjm0LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none)),equal(rodinpos(m8,'CS_TopLevel_guards2','_ZKMlkLkaEeW2TOhOfFhbNg'),identifier(none,connected_concentrate),identifier(none,'CONCENTRATE_NONE'))],[],[assign(rodinpos(m8,enter_PREPARATION,'_JjCZ8rR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'PREPARATION')]),assign(rodinpos(m8,enter_CF_TESTING,'_ttVsI7R9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CF_TESTING')]),assign(rodinpos(m8,enter_CF_TESTING_SIGNAL_OFF,'_QbcFsLkaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_SIGNAL_OFF')])],[]),event(rodinpos(m8,'HDSystem_StartsConnectingPatient','_uXHVwLUpEeWNr7Z28XyZBR'),'HDSystem_StartsConnectingPatient',ordinary(none),['HDSystem_StartsConnectingPatient'],[],[equal(rodinpos(m8,isin_PREPARATION,'_JjCZ87R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION')),equal(rodinpos(m8,isin_DIALYZER_RINSING,'_ttVsJLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'DIALYZER_RINSING'))],[],[assign(rodinpos(m8,enter_INITIATION,'_JjDBALR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'INITIATION')]),assign(rodinpos(m8,leave_PREPARATION_sm,'_ttVsJbR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m8,enter_PATIENT_CONNECTING,'_ttVsJrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'PATIENT_CONNECTING')]),assign(rodinpos(m8,leave_CF_TESTING_sm,'_QbcFsbkaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_sm_NULL')])],[]),event(rodinpos(m8,'HDSystem_StartsReinfusion','_uXHVwLUpEeWNr7Z28XyZBS'),'HDSystem_StartsReinfusion',ordinary(none),['HDSystem_StartsReinfusion'],[],[equal(rodinpos(m8,isin_INITIATION,'_JjDBAbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'INITIATION')),equal(rodinpos(m8,isin_THERAPY,'_ttWTMLR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'THERAPY'))],[],[assign(rodinpos(m8,enter_ENDING,'_JjDBArR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'ENDING')]),assign(rodinpos(m8,leave_INITIATION_sm,'_ttWTMbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m8,enter_REINFUSION,'_ttWTMrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'REINFUSION')])],[]),event(rodinpos(m8,'User_PressesOff','_uXHVwLUpEeWNr7Z28XyZBT'),'User_PressesOff',ordinary(none),['User_PressesOff'],[],[equal(rodinpos(m8,isin_ENDING,'_JjDBA7R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'ENDING')),equal(rodinpos(m8,isin_THERAPY_OVERVIEWING,'_ttWTM7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'THERAPY_OVERVIEWING'))],[],[assign(rodinpos(m8,enter_STANDBY,'_JjDoELR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m8,leave_ENDING_sm,'_ttWTNLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')]),assign(rodinpos(m8,'CS_TopLevel_actions1','_yVpBwLhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[cartesian_product(none,identifier(none,'SIGNAL'),set_extension(none,[identifier(none,'SIGNAL_OFF')]))])],[]),event(rodinpos(m8,'CS_TopLevel_StartsConnectingConcentrate','_uXHVwLUpEeWNr7Z28XyZBU'),'CS_TopLevel_StartsConnectingConcentrate',ordinary(none),['CS_TopLevel_StartsConnectingConcentrate'],[],[equal(rodinpos(m8,isin_CF_TESTING,'_ttW6QLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m8,'PREPARATION_sm_guards1','_0cjm0bUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none)),equal(rodinpos(m8,isin_CF_TESTING_SIGNAL_GREEN,'_QbcFsrkaEeW2TOhOfFhbNg'),identifier(none,'CF_TESTING_sm'),identifier(none,'CF_TESTING_SIGNAL_GREEN'))],[],[assign(rodinpos(m8,enter_CONCENTRATE_CONNECTING,'_ttXhULR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CONCENTRATE_CONNECTING')]),assign(rodinpos(m8,leave_CF_TESTING_sm,'_QbcFs7kaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_sm_NULL')])],[]),event(rodinpos(m8,'HDSystem_StartsSettingRP','_uXHVwLUpEeWNr7Z28XyZBV'),'HDSystem_StartsSettingRP',ordinary(none),['HDSystem_StartsSettingRP'],[],[equal(rodinpos(m8,isin_CONCENTRATE_CONNECTING,'_ttXhUbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CONCENTRATE_CONNECTING')),not_equal(rodinpos(m8,'PREPARATION_sm_guards1','_ZKMlkbkaEeW2TOhOfFhbNg'),identifier(none,connected_concentrate),identifier(none,'CONCENTRATE_NONE'))],[],[assign(rodinpos(m8,enter_RP_SETTING,'_ttXhUrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'RP_SETTING')])],[]),event(rodinpos(m8,'HDSystem_StartsPreparingTS','_uXHVwLUpEeWNr7Z28XyZBW'),'HDSystem_StartsPreparingTS',ordinary(none),['HDSystem_StartsPreparingTS'],[],[equal(rodinpos(m8,isin_RP_SETTING,'_ttXhU7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'RP_SETTING'))],[],[assign(rodinpos(m8,enter_TS_PREPARING,'_ttXhVLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TS_PREPARING')])],[]),event(rodinpos(m8,'HDSystem_StartsPreparingHP','_uXHVwLUpEeWNr7Z28XyZBX'),'HDSystem_StartsPreparingHP',ordinary(none),['HDSystem_StartsPreparingHP'],[],[equal(rodinpos(m8,isin_TS_PREPARING,'_ttXhVbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TS_PREPARING'))],[],[assign(rodinpos(m8,enter_HP_PREPARING,'_ttYIYLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'HP_PREPARING')])],[]),event(rodinpos(m8,'HDSystem_StartsSettingTP','_uXHVwLUpEeWNr7Z28XyZBY'),'HDSystem_StartsSettingTP',ordinary(none),['HDSystem_StartsSettingTP'],[],[equal(rodinpos(m8,isin_HP_PREPARING,'_ttYIYbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'HP_PREPARING'))],[],[assign(rodinpos(m8,enter_TP_SETTING,'_ttYIYrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TP_SETTING')])],[]),event(rodinpos(m8,'HDSystem_StartsRinsingDialyzer','_uXHVwLUpEeWNr7Z28XyZBZ'),'HDSystem_StartsRinsingDialyzer',ordinary(none),['HDSystem_StartsRinsingDialyzer'],[],[equal(rodinpos(m8,isin_TP_SETTING,'_ttYIY7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TP_SETTING'))],[],[assign(rodinpos(m8,enter_DIALYZER_RINSING,'_ttYIZLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'DIALYZER_RINSING')])],[]),event(rodinpos(m8,'HDSystem_StartsTherapy','_uXHVwLUpEeWNr7Z28XyZB['),'HDSystem_StartsTherapy',ordinary(none),['HDSystem_StartsTherapy'],[],[equal(rodinpos(m8,isin_PATIENT_CONNECTING,'_ttYIZbR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'PATIENT_CONNECTING'))],[],[assign(rodinpos(m8,enter_THERAPY,'_ttYIZrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'THERAPY')])],[]),event(rodinpos(m8,'HDSystem_StartsEmptyingDialyzer','_uXHVwLUpEeWNr7Z28XyZB\\'),'HDSystem_StartsEmptyingDialyzer',ordinary(none),['HDSystem_StartsEmptyingDialyzer'],[],[equal(rodinpos(m8,isin_REINFUSION,'_ttYvcLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'REINFUSION'))],[],[assign(rodinpos(m8,enter_DIALYZER_EMPTYING,'_ttYvcbR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'DIALYZER_EMPTYING')])],[]),event(rodinpos(m8,'HDSystem_StartsEmptyingCartridge','_uXHVwLUpEeWNr7Z28XyZB]'),'HDSystem_StartsEmptyingCartridge',ordinary(none),['HDSystem_StartsEmptyingCartridge'],[],[equal(rodinpos(m8,isin_DIALYZER_EMPTYING,'_ttYvcrR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'DIALYZER_EMPTYING'))],[],[assign(rodinpos(m8,enter_CARTRIDGE_EMPTYING,'_ttYvc7R9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'CARTRIDGE_EMPTYING')])],[]),event(rodinpos(m8,'HDSystem_StartsOverviewingTherapy','_uXHVwLUpEeWNr7Z28XyZB^'),'HDSystem_StartsOverviewingTherapy',ordinary(none),['HDSystem_StartsOverviewingTherapy'],[],[equal(rodinpos(m8,isin_CARTRIDGE_EMPTYING,'_ttYvdLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'CARTRIDGE_EMPTYING'))],[],[assign(rodinpos(m8,enter_THERAPY_OVERVIEWING,'_ttZWgLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'THERAPY_OVERVIEWING')])],[]),event(rodinpos(m8,'CS_LowLevel_StartsTestingCF','_uXHVwLUpEeWNr7Z28XyZB_'),'CS_LowLevel_StartsTestingCF',ordinary(none),['CS_LowLevel_StartsTestingCF'],[],[equal(rodinpos(m8,'CS_LowLevel_CFTesting_guards1','_0fmTwLUlEeWNr7Z28XyZAQ'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m8,isin_CS_LL_CF_NOT_TESTED,'_0fmTwbUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m8,leave_CS_LL_CF_NOT_TESTED,'_0fm60LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_false(none)]),assign(rodinpos(m8,enter_CS_LL_CF_TESTING,'_0fm60bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_true(none)]),assign(rodinpos(m8,act1,'('),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_true(none)])],[]),event(rodinpos(m8,'CS_LowLevel_StandsBy','_uXHVwLUpEeWNr7Z28XyZB\140\'),'CS_LowLevel_StandsBy',ordinary(none),['CS_LowLevel_StandsBy'],[],[equal(rodinpos(m8,'CS_LowLevel_CFTesting_guards2','_0fm60rUlEeWNr7Z28XyZAQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m8,isin_CS_LL_CF_TESTED_OK,'_0fm607UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m8,leave_CS_LL_CF_TESTED_OK,'_0fm61LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m8,enter_CS_LL_CF_NOT_TESTED,'_0fm61bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)]),assign(rodinpos(m8,'CS_LowLevel_CFTesting_actions1','_QfHEwLkaEeW2TOhOfFhbNg'),[identifier(none,signal_status)],[cartesian_product(none,identifier(none,'SIGNAL'),set_extension(none,[identifier(none,'SIGNAL_OFF')]))])],[]),event(rodinpos(m8,'CS_LowLevel_CFTestsOK','_uXHVwLUpEeWNr7Z28XyZBa'),'CS_LowLevel_CFTestsOK',ordinary(none),['CS_LowLevel_CFTestsOK'],[],[equal(rodinpos(m8,isin_CS_LL_CF_TESTING,'_0fnh4LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m8,'CS_LowLevel_CFTesting_guards3','_P7bT8LVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_true(none)),equal(rodinpos(m8,grd1,'('),identifier(none,'HD_2_CS_CFTestingFinished'),boolean_true(none))],[],[assign(rodinpos(m8,leave_CS_LL_CF_TESTING,'_0fnh4bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m8,enter_CS_LL_CF_TESTED_OK,'_0fnh4rUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_true(none)]),assign(rodinpos(m8,act1,')'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)])],[]),event(rodinpos(m8,'CS_LowLevel_CFTestsKO','_uXHVwLUpEeWNr7Z28XyZBb'),'CS_LowLevel_CFTestsKO',ordinary(none),['CS_LowLevel_CFTestsKO'],[],[equal(rodinpos(m8,isin_CS_LL_CF_TESTING,'_0fnh47UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m8,'CS_LowLevel_CFTesting_guards4','_P7bT8bVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_false(none)),equal(rodinpos(m8,grd1,'('),identifier(none,'HD_2_CS_CFTestingFinished'),boolean_true(none))],[],[assign(rodinpos(m8,leave_CS_LL_CF_TESTING,'_0fnh5LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m8,enter_CS_LL_CF_TESTED_KO,'_0fnh5bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_true(none)]),assign(rodinpos(m8,act1,')'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)])],[]),event(rodinpos(m8,'HDMachine_CFTests','_uXHVwLUpEeWNr7Z28XyZBc'),'HDMachine_CFTests',ordinary(none),['HDMachine_CFTests'],[],[equal(rodinpos(m8,grd1,'('),identifier(none,'CS_2_HD_StartsCFTesting'),boolean_true(none))],[],[becomes_element_of(rodinpos(m8,act1,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none)),assign(rodinpos(m8,act2,')'),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_false(none)]),assign(rodinpos(m8,act3,'*'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_true(none)])],[]),event(rodinpos(m8,'CS_TopLevel_CFTestingSignal2Green','_uXHVwLUpEeWNr7Z28XyZBd'),'CS_TopLevel_CFTestingSignal2Green',ordinary(none),['CS_TopLevel_CFTestingSignal2Green'],[identifier(rodinpos(m8,[],'_ycDLwLhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m8,instanceType_sgn,'_ycDLwbhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m8,'ENVIRONMENT_guards1','_ycDLwrhTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m8,'CF_TESTING_sm_guards1','_QbdT0LkaEeW2TOhOfFhbNg'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none)),equal(rodinpos(m8,isin_CF_TESTING_SIGNAL_OFF,'_QbdT0bkaEeW2TOhOfFhbNg'),identifier(none,'CF_TESTING_sm'),identifier(none,'CF_TESTING_SIGNAL_OFF')),equal(rodinpos(m8,'ENVIRONMENT_guards3','_QiRtgLkaEeW2TOhOfFhbNg'),identifier(none,sgn),identifier(none,'CF_TESTING_SIGNAL'))],[],[assign(rodinpos(m8,'ENVIRONMENT_actions1','_ycDy0LhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_GREEN')])]))]),assign(rodinpos(m8,enter_CF_TESTING_SIGNAL_GREEN,'_QbdT0rkaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_SIGNAL_GREEN')])],[]),event(rodinpos(m8,'CS_TopLevel_CFTestingSignal2Red','_uXHVwLUpEeWNr7Z28XyZBe'),'CS_TopLevel_CFTestingSignal2Red',ordinary(none),['CS_TopLevel_CFTestingSignal2Red'],[identifier(rodinpos(m8,[],'_ycDy0bhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m8,instanceType_sgn,'_ycDy0rhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m8,'ENVIRONMENT_guards2','_ycDy07hTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m8,'CF_TESTING_sm_guards2','_Qbd64LkaEeW2TOhOfFhbNg'),identifier(none,'CS_LL_CF_TESTED_KO'),boolean_true(none)),equal(rodinpos(m8,isin_CF_TESTING_SIGNAL_OFF,'_Qbd64bkaEeW2TOhOfFhbNg'),identifier(none,'CF_TESTING_sm'),identifier(none,'CF_TESTING_SIGNAL_OFF')),equal(rodinpos(m8,'ENVIRONMENT_guards4','_QiRtgbkaEeW2TOhOfFhbNg'),identifier(none,sgn),identifier(none,'CF_TESTING_SIGNAL'))],[],[assign(rodinpos(m8,'ENVIRONMENT_actions2','_ycDy1LhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_RED')])]))]),assign(rodinpos(m8,enter_CF_TESTING_SIGNAL_RED,'_Qbd64rkaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_SIGNAL_RED')])],[]),event(rodinpos(m8,'User_ConnectsConcentrate','_uXHVwLUpEeWNr7Z28XyZBf'),'User_ConnectsConcentrate',ordinary(none),['User_ConnectsConcentrate'],[],[equal(rodinpos(m8,grd1,'\''),identifier(none,'PREPARATION_sm'),identifier(none,'CONCENTRATE_CONNECTING')),equal(rodinpos(m8,grd2,')'),identifier(none,connected_concentrate),identifier(none,'CONCENTRATE_NONE'))],[],[becomes_element_of(rodinpos(m8,act1,'('),[identifier(none,connected_concentrate)],set_extension(none,[identifier(none,'CONCENTRATE_BICARBONATE'),identifier(none,'CONCENTRATE_ACETATE')]))],[]),event(rodinpos(m8,'User_DisconnectsConcentrate','_uXHVwLUpEeWNr7Z28XyZBg'),'User_DisconnectsConcentrate',ordinary(none),['User_DisconnectsConcentrate'],[],[equal(rodinpos(m8,grd1,'\''),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),not_equal(rodinpos(m8,grd2,')'),identifier(none,connected_concentrate),identifier(none,'CONCENTRATE_NONE'))],[],[assign(rodinpos(m8,act1,'('),[identifier(none,connected_concentrate)],[identifier(none,'CONCENTRATE_NONE')])],[]),event(rodinpos(m8,'User_SetsRinsingParameters','_uXHVwLUpEeWNr7Z28XyZBh'),'User_SetsRinsingParameters',ordinary(none),[],[],[equal(rodinpos(m8,grd1,'('),identifier(none,'PREPARATION_sm'),identifier(none,'RP_SETTING'))],[],[becomes_element_of(rodinpos(m8,act1,'\''),[identifier(none,fillingBPRate)],identifier(none,'FILLING_BP_RATE_RANGE')),becomes_element_of(rodinpos(m8,act2,')'),[identifier(none,fillingBPVolume)],identifier(none,'FILLING_BP_VOLUME_RANGE')),becomes_element_of(rodinpos(m8,act3,'*'),[identifier(none,rinsingBPRate)],identifier(none,'RINSING_BP_RATE_RANGE')),becomes_element_of(rodinpos(m8,act4,'+'),[identifier(none,'DFFlow')],identifier(none,'DF_FLOW_RANGE')),becomes_element_of(rodinpos(m8,act5,','),[identifier(none,'UFRinsingRate')],identifier(none,'UF_RINSING_RATE_RANGE')),becomes_element_of(rodinpos(m8,act6,'-'),[identifier(none,bloodFlow)],identifier(none,'BLOOD_FLOW_RANGE'))],[]),event(rodinpos(m8,'CS_TopLevel_SignalToRED','_8jV38LhrEeWeLteVXSdMfg'),'CS_TopLevel_SignalToRED',ordinary(none),['CS_TopLevel_SignalToRED'],[identifier(rodinpos(m8,[],'_ycDy0bhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m8,instanceType_sgn,'_ycDy0rhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m8,'ENVIRONMENT_guards2','_ycDy07hTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),not_equal(rodinpos(m8,'ENVIRONMENT_guards1','_QiTisbkaEeW2TOhOfFhbNg'),identifier(none,sgn),identifier(none,'CF_TESTING_SIGNAL'))],[],[assign(rodinpos(m8,'ENVIRONMENT_actions2','_ycDy1LhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_RED')])]))])],[]),event(rodinpos(m8,'CS_TopLevel_SignalToGREEN','_8jWfAbhrEeWeLteVXSdMfg'),'CS_TopLevel_SignalToGREEN',ordinary(none),['CS_TopLevel_SignalToGREEN'],[identifier(rodinpos(m8,[],'_ycDLwLhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m8,instanceType_sgn,'_ycDLwbhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m8,'ENVIRONMENT_guards1','_ycDLwrhTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),not_equal(rodinpos(m8,'ENVIRONMENT_guards2','_QiTisLkaEeW2TOhOfFhbNg'),identifier(none,sgn),identifier(none,'CF_TESTING_SIGNAL'))],[],[assign(rodinpos(m8,'ENVIRONMENT_actions1','_ycDy0LhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_GREEN')])]))])],[]),event(rodinpos(m8,'CS_TopLevel_SignalToORANGE','_8jWfA7hrEeWeLteVXSdMfg'),'CS_TopLevel_SignalToORANGE',ordinary(none),['CS_TopLevel_SignalToORANGE'],[identifier(rodinpos(m8,[],'_ycDy1bhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m8,instanceType_sgn,'_ycDy1rhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m8,'ENVIRONMENT_guards3','_ycEZ4LhTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),not_equal(rodinpos(m8,'ENVIRONMENT_guards1','_QiTisrkaEeW2TOhOfFhbNg'),identifier(none,sgn),identifier(none,'CF_TESTING_SIGNAL'))],[],[assign(rodinpos(m8,'ENVIRONMENT_actions3','_ycEZ4bhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_ORANGE')])]))])],[])])]),event_b_model(none,m7,[sees(none,[m0_implicitContext,m1_implicitContext,m2_implicitContext,m3_implicitContext,m4_implicitContext,m5_implicitContext,m6_implicitContext,m7_implicitContext,'c5-signals','c6-CFTestingSignal','c7-concentrates']),refines(none,m6),variables(none,[identifier(none,signal_status),identifier(none,'CS_LL_CF_TESTED_KO'),identifier(none,'CS_TopLevel'),identifier(none,'CS_LL_CF_TESTED_OK'),identifier(none,'CF_TESTING_sm'),identifier(none,'CS_LL_CF_NOT_TESTED'),identifier(none,connected_concentrate),identifier(none,'CS_2_HD_StartsCFTesting'),identifier(none,'HD_2_CS_CFTestingFinished'),identifier(none,'HDMachine_CFTestedOK'),identifier(none,'CS_LL_CF_TESTING'),identifier(none,'INITIATION_sm'),identifier(none,'ENDING_sm'),identifier(none,'PREPARATION_sm')]),invariant(none,[]),theorems(none,[member(rodinpos(m7,'connected_concentrate-TYPE','_uXHVwLUpEeWNr7Z28XyZBF'),identifier(none,connected_concentrate),identifier(none,'CONCENTRATE'))]),events(none,[event(rodinpos(m7,'INITIALISATION','_uXHVwLUpEeWNr7Z28XyZB('),'INITIALISATION',ordinary(none),['INITIALISATION'],[],[],[],[assign(rodinpos(m7,init_CS_TopLevel,'_JjCZ8LR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m7,init_PREPARATION_sm,'_ttVsILR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m7,init_INITIATION_sm,'_ttVsIbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m7,init_ENDING_sm,'_ttVsIrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')]),assign(rodinpos(m7,init_CS_LL_CF_NOT_TESTED,'_0fj3gLUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)]),assign(rodinpos(m7,init_CS_LL_CF_TESTING,'_0fj3gbUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m7,init_CS_LL_CF_TESTED_OK,'_0fj3grUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m7,init_CS_LL_CF_TESTED_KO,'_0fj3g7UlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_false(none)]),becomes_element_of(rodinpos(m7,init_HDMachine_CFTestedOK,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none)),assign(rodinpos(m7,act1,'\''),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_false(none)]),assign(rodinpos(m7,act2,'('),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)]),assign(rodinpos(m7,init_signal_status,'_ycAIcLhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[cartesian_product(none,identifier(none,'SIGNAL'),set_extension(none,[identifier(none,'SIGNAL_OFF')]))]),assign(rodinpos(m7,init_CF_TESTING_sm,'_QbbeorkaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_sm_NULL')]),assign(rodinpos(m7,init_connected_concentrate,'\''),[identifier(none,connected_concentrate)],[identifier(none,'CONCENTRATE_NONE')])],[]),event(rodinpos(m7,'User_PressesOn','_uXHVwLUpEeWNr7Z28XyZB)'),'User_PressesOn',ordinary(none),['User_PressesOn'],[],[equal(rodinpos(m7,isin_STANDBY,'_JjCZ8bR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m7,'CS_TopLevel_guards1','_0cjm0LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none)),equal(rodinpos(m7,'CS_TopLevel_guards2','_ZKMlkLkaEeW2TOhOfFhbNg'),identifier(none,connected_concentrate),identifier(none,'CONCENTRATE_NONE'))],[],[assign(rodinpos(m7,enter_PREPARATION,'_JjCZ8rR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'PREPARATION')]),assign(rodinpos(m7,enter_CF_TESTING,'_ttVsI7R9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CF_TESTING')]),assign(rodinpos(m7,enter_CF_TESTING_SIGNAL_OFF,'_QbcFsLkaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_SIGNAL_OFF')])],[]),event(rodinpos(m7,'HDSystem_StartsConnectingPatient','_uXHVwLUpEeWNr7Z28XyZB*'),'HDSystem_StartsConnectingPatient',ordinary(none),['HDSystem_StartsConnectingPatient'],[],[equal(rodinpos(m7,isin_PREPARATION,'_JjCZ87R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION')),equal(rodinpos(m7,isin_DIALYZER_RINSING,'_ttVsJLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'DIALYZER_RINSING'))],[],[assign(rodinpos(m7,enter_INITIATION,'_JjDBALR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'INITIATION')]),assign(rodinpos(m7,leave_PREPARATION_sm,'_ttVsJbR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m7,enter_PATIENT_CONNECTING,'_ttVsJrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'PATIENT_CONNECTING')]),assign(rodinpos(m7,leave_CF_TESTING_sm,'_QbcFsbkaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_sm_NULL')])],[]),event(rodinpos(m7,'HDSystem_StartsReinfusion','_uXHVwLUpEeWNr7Z28XyZB+'),'HDSystem_StartsReinfusion',ordinary(none),['HDSystem_StartsReinfusion'],[],[equal(rodinpos(m7,isin_INITIATION,'_JjDBAbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'INITIATION')),equal(rodinpos(m7,isin_THERAPY,'_ttWTMLR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'THERAPY'))],[],[assign(rodinpos(m7,enter_ENDING,'_JjDBArR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'ENDING')]),assign(rodinpos(m7,leave_INITIATION_sm,'_ttWTMbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m7,enter_REINFUSION,'_ttWTMrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'REINFUSION')])],[]),event(rodinpos(m7,'User_PressesOff','_uXHVwLUpEeWNr7Z28XyZB,'),'User_PressesOff',ordinary(none),['User_PressesOff'],[],[equal(rodinpos(m7,isin_ENDING,'_JjDBA7R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'ENDING')),equal(rodinpos(m7,isin_THERAPY_OVERVIEWING,'_ttWTM7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'THERAPY_OVERVIEWING'))],[],[assign(rodinpos(m7,enter_STANDBY,'_JjDoELR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m7,leave_ENDING_sm,'_ttWTNLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')]),assign(rodinpos(m7,'CS_TopLevel_actions1','_yVpBwLhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[cartesian_product(none,identifier(none,'SIGNAL'),set_extension(none,[identifier(none,'SIGNAL_OFF')]))])],[]),event(rodinpos(m7,'CS_TopLevel_StartsConnectingConcentrate','_uXHVwLUpEeWNr7Z28XyZB-'),'CS_TopLevel_StartsConnectingConcentrate',ordinary(none),['CS_TopLevel_StartsConnectingConcentrate'],[],[equal(rodinpos(m7,isin_CF_TESTING,'_ttW6QLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m7,'PREPARATION_sm_guards1','_0cjm0bUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none)),equal(rodinpos(m7,isin_CF_TESTING_SIGNAL_GREEN,'_QbcFsrkaEeW2TOhOfFhbNg'),identifier(none,'CF_TESTING_sm'),identifier(none,'CF_TESTING_SIGNAL_GREEN'))],[],[assign(rodinpos(m7,enter_CONCENTRATE_CONNECTING,'_ttXhULR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CONCENTRATE_CONNECTING')]),assign(rodinpos(m7,leave_CF_TESTING_sm,'_QbcFs7kaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_sm_NULL')])],[]),event(rodinpos(m7,'HDSystem_StartsSettingRP','_uXHVwLUpEeWNr7Z28XyZB.'),'HDSystem_StartsSettingRP',ordinary(none),['HDSystem_StartsSettingRP'],[],[equal(rodinpos(m7,isin_CONCENTRATE_CONNECTING,'_ttXhUbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CONCENTRATE_CONNECTING')),not_equal(rodinpos(m7,'PREPARATION_sm_guards1','_ZKMlkbkaEeW2TOhOfFhbNg'),identifier(none,connected_concentrate),identifier(none,'CONCENTRATE_NONE'))],[],[assign(rodinpos(m7,enter_RP_SETTING,'_ttXhUrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'RP_SETTING')])],[]),event(rodinpos(m7,'HDSystem_StartsPreparingTS','_uXHVwLUpEeWNr7Z28XyZB/'),'HDSystem_StartsPreparingTS',ordinary(none),['HDSystem_StartsPreparingTS'],[],[equal(rodinpos(m7,isin_RP_SETTING,'_ttXhU7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'RP_SETTING'))],[],[assign(rodinpos(m7,enter_TS_PREPARING,'_ttXhVLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TS_PREPARING')])],[]),event(rodinpos(m7,'HDSystem_StartsPreparingHP','_uXHVwLUpEeWNr7Z28XyZB0'),'HDSystem_StartsPreparingHP',ordinary(none),['HDSystem_StartsPreparingHP'],[],[equal(rodinpos(m7,isin_TS_PREPARING,'_ttXhVbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TS_PREPARING'))],[],[assign(rodinpos(m7,enter_HP_PREPARING,'_ttYIYLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'HP_PREPARING')])],[]),event(rodinpos(m7,'HDSystem_StartsSettingTP','_uXHVwLUpEeWNr7Z28XyZB1'),'HDSystem_StartsSettingTP',ordinary(none),['HDSystem_StartsSettingTP'],[],[equal(rodinpos(m7,isin_HP_PREPARING,'_ttYIYbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'HP_PREPARING'))],[],[assign(rodinpos(m7,enter_TP_SETTING,'_ttYIYrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TP_SETTING')])],[]),event(rodinpos(m7,'HDSystem_StartsRinsingDialyzer','_uXHVwLUpEeWNr7Z28XyZB2'),'HDSystem_StartsRinsingDialyzer',ordinary(none),['HDSystem_StartsRinsingDialyzer'],[],[equal(rodinpos(m7,isin_TP_SETTING,'_ttYIY7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TP_SETTING'))],[],[assign(rodinpos(m7,enter_DIALYZER_RINSING,'_ttYIZLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'DIALYZER_RINSING')])],[]),event(rodinpos(m7,'HDSystem_StartsTherapy','_uXHVwLUpEeWNr7Z28XyZB3'),'HDSystem_StartsTherapy',ordinary(none),['HDSystem_StartsTherapy'],[],[equal(rodinpos(m7,isin_PATIENT_CONNECTING,'_ttYIZbR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'PATIENT_CONNECTING'))],[],[assign(rodinpos(m7,enter_THERAPY,'_ttYIZrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'THERAPY')])],[]),event(rodinpos(m7,'HDSystem_StartsEmptyingDialyzer','_uXHVwLUpEeWNr7Z28XyZB4'),'HDSystem_StartsEmptyingDialyzer',ordinary(none),['HDSystem_StartsEmptyingDialyzer'],[],[equal(rodinpos(m7,isin_REINFUSION,'_ttYvcLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'REINFUSION'))],[],[assign(rodinpos(m7,enter_DIALYZER_EMPTYING,'_ttYvcbR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'DIALYZER_EMPTYING')])],[]),event(rodinpos(m7,'HDSystem_StartsEmptyingCartridge','_uXHVwLUpEeWNr7Z28XyZB5'),'HDSystem_StartsEmptyingCartridge',ordinary(none),['HDSystem_StartsEmptyingCartridge'],[],[equal(rodinpos(m7,isin_DIALYZER_EMPTYING,'_ttYvcrR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'DIALYZER_EMPTYING'))],[],[assign(rodinpos(m7,enter_CARTRIDGE_EMPTYING,'_ttYvc7R9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'CARTRIDGE_EMPTYING')])],[]),event(rodinpos(m7,'HDSystem_StartsOverviewingTherapy','_uXHVwLUpEeWNr7Z28XyZB6'),'HDSystem_StartsOverviewingTherapy',ordinary(none),['HDSystem_StartsOverviewingTherapy'],[],[equal(rodinpos(m7,isin_CARTRIDGE_EMPTYING,'_ttYvdLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'CARTRIDGE_EMPTYING'))],[],[assign(rodinpos(m7,enter_THERAPY_OVERVIEWING,'_ttZWgLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'THERAPY_OVERVIEWING')])],[]),event(rodinpos(m7,'CS_LowLevel_StartsTestingCF','_uXHVwLUpEeWNr7Z28XyZB7'),'CS_LowLevel_StartsTestingCF',ordinary(none),['CS_LowLevel_StartsTestingCF'],[],[equal(rodinpos(m7,'CS_LowLevel_CFTesting_guards1','_0fmTwLUlEeWNr7Z28XyZAQ'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m7,isin_CS_LL_CF_NOT_TESTED,'_0fmTwbUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m7,leave_CS_LL_CF_NOT_TESTED,'_0fm60LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_false(none)]),assign(rodinpos(m7,enter_CS_LL_CF_TESTING,'_0fm60bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_true(none)]),assign(rodinpos(m7,act1,'('),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_true(none)])],[]),event(rodinpos(m7,'CS_LowLevel_StandsBy','_uXHVwLUpEeWNr7Z28XyZB8'),'CS_LowLevel_StandsBy',ordinary(none),['CS_LowLevel_StandsBy'],[],[equal(rodinpos(m7,'CS_LowLevel_CFTesting_guards2','_0fm60rUlEeWNr7Z28XyZAQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m7,isin_CS_LL_CF_TESTED_OK,'_0fm607UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m7,leave_CS_LL_CF_TESTED_OK,'_0fm61LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m7,enter_CS_LL_CF_NOT_TESTED,'_0fm61bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)]),assign(rodinpos(m7,'CS_LowLevel_CFTesting_actions1','_QfHEwLkaEeW2TOhOfFhbNg'),[identifier(none,signal_status)],[cartesian_product(none,identifier(none,'SIGNAL'),set_extension(none,[identifier(none,'SIGNAL_OFF')]))])],[]),event(rodinpos(m7,'CS_LowLevel_CFTestsOK','_uXHVwLUpEeWNr7Z28XyZB9'),'CS_LowLevel_CFTestsOK',ordinary(none),['CS_LowLevel_CFTestsOK'],[],[equal(rodinpos(m7,isin_CS_LL_CF_TESTING,'_0fnh4LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m7,'CS_LowLevel_CFTesting_guards3','_P7bT8LVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_true(none)),equal(rodinpos(m7,grd1,'('),identifier(none,'HD_2_CS_CFTestingFinished'),boolean_true(none))],[],[assign(rodinpos(m7,leave_CS_LL_CF_TESTING,'_0fnh4bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m7,enter_CS_LL_CF_TESTED_OK,'_0fnh4rUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_true(none)]),assign(rodinpos(m7,act1,')'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)])],[]),event(rodinpos(m7,'CS_LowLevel_CFTestsKO','_uXHVwLUpEeWNr7Z28XyZB:'),'CS_LowLevel_CFTestsKO',ordinary(none),['CS_LowLevel_CFTestsKO'],[],[equal(rodinpos(m7,isin_CS_LL_CF_TESTING,'_0fnh47UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m7,'CS_LowLevel_CFTesting_guards4','_P7bT8bVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_false(none)),equal(rodinpos(m7,grd1,'('),identifier(none,'HD_2_CS_CFTestingFinished'),boolean_true(none))],[],[assign(rodinpos(m7,leave_CS_LL_CF_TESTING,'_0fnh5LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m7,enter_CS_LL_CF_TESTED_KO,'_0fnh5bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_true(none)]),assign(rodinpos(m7,act1,')'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)])],[]),event(rodinpos(m7,'HDMachine_CFTests','_uXHVwLUpEeWNr7Z28XyZB;'),'HDMachine_CFTests',ordinary(none),['HDMachine_CFTests'],[],[equal(rodinpos(m7,grd1,'('),identifier(none,'CS_2_HD_StartsCFTesting'),boolean_true(none))],[],[becomes_element_of(rodinpos(m7,act1,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none)),assign(rodinpos(m7,act2,')'),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_false(none)]),assign(rodinpos(m7,act3,'*'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_true(none)])],[]),event(rodinpos(m7,'CS_TopLevel_CFTestingSignal2Green','_uXHVwLUpEeWNr7Z28XyZB='),'CS_TopLevel_CFTestingSignal2Green',ordinary(none),['CS_TopLevel_CFTestingSignal2Green'],[identifier(rodinpos(m7,[],'_ycDLwLhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m7,instanceType_sgn,'_ycDLwbhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m7,'ENVIRONMENT_guards1','_ycDLwrhTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m7,'CF_TESTING_sm_guards1','_QbdT0LkaEeW2TOhOfFhbNg'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none)),equal(rodinpos(m7,isin_CF_TESTING_SIGNAL_OFF,'_QbdT0bkaEeW2TOhOfFhbNg'),identifier(none,'CF_TESTING_sm'),identifier(none,'CF_TESTING_SIGNAL_OFF')),equal(rodinpos(m7,'ENVIRONMENT_guards3','_QiRtgLkaEeW2TOhOfFhbNg'),identifier(none,sgn),identifier(none,'CF_TESTING_SIGNAL'))],[],[assign(rodinpos(m7,'ENVIRONMENT_actions1','_ycDy0LhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_GREEN')])]))]),assign(rodinpos(m7,enter_CF_TESTING_SIGNAL_GREEN,'_QbdT0rkaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_SIGNAL_GREEN')])],[]),event(rodinpos(m7,'CS_TopLevel_CFTestingSignal2Red','_uXHVwLUpEeWNr7Z28XyZB>'),'CS_TopLevel_CFTestingSignal2Red',ordinary(none),['CS_TopLevel_CFTestingSignal2Red'],[identifier(rodinpos(m7,[],'_ycDy0bhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m7,instanceType_sgn,'_ycDy0rhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m7,'ENVIRONMENT_guards2','_ycDy07hTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m7,'CF_TESTING_sm_guards2','_Qbd64LkaEeW2TOhOfFhbNg'),identifier(none,'CS_LL_CF_TESTED_KO'),boolean_true(none)),equal(rodinpos(m7,isin_CF_TESTING_SIGNAL_OFF,'_Qbd64bkaEeW2TOhOfFhbNg'),identifier(none,'CF_TESTING_sm'),identifier(none,'CF_TESTING_SIGNAL_OFF')),equal(rodinpos(m7,'ENVIRONMENT_guards4','_QiRtgbkaEeW2TOhOfFhbNg'),identifier(none,sgn),identifier(none,'CF_TESTING_SIGNAL'))],[],[assign(rodinpos(m7,'ENVIRONMENT_actions2','_ycDy1LhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_RED')])]))]),assign(rodinpos(m7,enter_CF_TESTING_SIGNAL_RED,'_Qbd64rkaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_SIGNAL_RED')])],[]),event(rodinpos(m7,'User_ConnectsConcentrate','_uXHVwLUpEeWNr7Z28XyZB?'),'User_ConnectsConcentrate',ordinary(none),[],[],[equal(rodinpos(m7,grd1,'\''),identifier(none,'PREPARATION_sm'),identifier(none,'CONCENTRATE_CONNECTING')),equal(rodinpos(m7,grd2,')'),identifier(none,connected_concentrate),identifier(none,'CONCENTRATE_NONE'))],[],[becomes_element_of(rodinpos(m7,act1,'('),[identifier(none,connected_concentrate)],set_extension(none,[identifier(none,'CONCENTRATE_BICARBONATE'),identifier(none,'CONCENTRATE_ACETATE')]))],[]),event(rodinpos(m7,'User_DisconnectsConcentrate','_uXHVwLUpEeWNr7Z28XyZB@'),'User_DisconnectsConcentrate',ordinary(none),[],[],[equal(rodinpos(m7,grd1,'\''),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),not_equal(rodinpos(m7,grd2,')'),identifier(none,connected_concentrate),identifier(none,'CONCENTRATE_NONE'))],[],[assign(rodinpos(m7,act1,'('),[identifier(none,connected_concentrate)],[identifier(none,'CONCENTRATE_NONE')])],[]),event(rodinpos(m7,'CS_TopLevel_SignalToRED','_-oIKQLhXEeWeLteVXSdMfg'),'CS_TopLevel_SignalToRED',ordinary(none),['CS_TopLevel_SignalToRED'],[identifier(rodinpos(m7,[],'_ycDy0bhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m7,instanceType_sgn,'_ycDy0rhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m7,'ENVIRONMENT_guards2','_ycDy07hTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),not_equal(rodinpos(m7,'ENVIRONMENT_guards1','_QiTisbkaEeW2TOhOfFhbNg'),identifier(none,sgn),identifier(none,'CF_TESTING_SIGNAL'))],[],[assign(rodinpos(m7,'ENVIRONMENT_actions2','_ycDy1LhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_RED')])]))])],[]),event(rodinpos(m7,'CS_TopLevel_SignalToGREEN','_-oIxUbhXEeWeLteVXSdMfg'),'CS_TopLevel_SignalToGREEN',ordinary(none),['CS_TopLevel_SignalToGREEN'],[identifier(rodinpos(m7,[],'_ycDLwLhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m7,instanceType_sgn,'_ycDLwbhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m7,'ENVIRONMENT_guards1','_ycDLwrhTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),not_equal(rodinpos(m7,'ENVIRONMENT_guards2','_QiTisLkaEeW2TOhOfFhbNg'),identifier(none,sgn),identifier(none,'CF_TESTING_SIGNAL'))],[],[assign(rodinpos(m7,'ENVIRONMENT_actions1','_ycDy0LhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_GREEN')])]))])],[]),event(rodinpos(m7,'CS_TopLevel_SignalToORANGE','_-oIxU7hXEeWeLteVXSdMfg'),'CS_TopLevel_SignalToORANGE',ordinary(none),['CS_TopLevel_SignalToORANGE'],[identifier(rodinpos(m7,[],'_ycDy1bhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m7,instanceType_sgn,'_ycDy1rhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m7,'ENVIRONMENT_guards3','_ycEZ4LhTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),not_equal(rodinpos(m7,'ENVIRONMENT_guards1','_QiTisrkaEeW2TOhOfFhbNg'),identifier(none,sgn),identifier(none,'CF_TESTING_SIGNAL'))],[],[assign(rodinpos(m7,'ENVIRONMENT_actions3','_ycEZ4bhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_ORANGE')])]))])],[])])]),event_b_model(none,m6,[sees(none,[m0_implicitContext,m1_implicitContext,m2_implicitContext,m3_implicitContext,m4_implicitContext,m5_implicitContext,m6_implicitContext,'c5-signals','c6-CFTestingSignal']),refines(none,m5),variables(none,[identifier(none,signal_status),identifier(none,'CS_LL_CF_TESTED_KO'),identifier(none,'CS_TopLevel'),identifier(none,'CS_LL_CF_TESTED_OK'),identifier(none,'CF_TESTING_sm'),identifier(none,'CS_LL_CF_NOT_TESTED'),identifier(none,'CS_2_HD_StartsCFTesting'),identifier(none,'HD_2_CS_CFTestingFinished'),identifier(none,'HDMachine_CFTestedOK'),identifier(none,'CS_LL_CF_TESTING'),identifier(none,'INITIATION_sm'),identifier(none,'ENDING_sm'),identifier(none,'PREPARATION_sm')]),invariant(none,[member(rodinpos(m6,typeof_CF_TESTING_sm,'_QbfwELkaEeW2TOhOfFhbNg'),identifier(none,'CF_TESTING_sm'),identifier(none,'CF_TESTING_sm_STATES')),equivalence(rodinpos(m6,superstateof_CF_TESTING_sm,'_QbfwEbkaEeW2TOhOfFhbNg'),not_equal(none,identifier(none,'CF_TESTING_sm'),identifier(none,'CF_TESTING_sm_NULL')),equal(none,identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING'))),implication(rodinpos(m6,'CF_TESTING_sm_invariants2','_QbfwErkaEeW2TOhOfFhbNg'),equal(none,identifier(none,'CF_TESTING_sm'),identifier(none,'CF_TESTING_SIGNAL_GREEN')),equal(none,function(none,identifier(none,signal_status),[identifier(none,'CF_TESTING_SIGNAL')]),identifier(none,'SIGNAL_GREEN'))),implication(rodinpos(m6,'CF_TESTING_sm_invariants1','_QbfwE7kaEeW2TOhOfFhbNg'),equal(none,identifier(none,'CF_TESTING_sm'),identifier(none,'CF_TESTING_SIGNAL_RED')),equal(none,function(none,identifier(none,signal_status),[identifier(none,'CF_TESTING_SIGNAL')]),identifier(none,'SIGNAL_RED')))]),theorems(none,[]),events(none,[event(rodinpos(m6,'INITIALISATION','_uXHVwLUpEeWNr7Z28XyZAg'),'INITIALISATION',ordinary(none),['INITIALISATION'],[],[],[],[assign(rodinpos(m6,init_CS_TopLevel,'_JjCZ8LR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m6,init_PREPARATION_sm,'_ttVsILR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m6,init_INITIATION_sm,'_ttVsIbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m6,init_ENDING_sm,'_ttVsIrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')]),assign(rodinpos(m6,init_CS_LL_CF_NOT_TESTED,'_0fj3gLUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)]),assign(rodinpos(m6,init_CS_LL_CF_TESTING,'_0fj3gbUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m6,init_CS_LL_CF_TESTED_OK,'_0fj3grUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m6,init_CS_LL_CF_TESTED_KO,'_0fj3g7UlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_false(none)]),becomes_element_of(rodinpos(m6,init_HDMachine_CFTestedOK,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none)),assign(rodinpos(m6,act1,'\''),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_false(none)]),assign(rodinpos(m6,act2,'('),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)]),assign(rodinpos(m6,init_signal_status,'_ycAIcLhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[cartesian_product(none,identifier(none,'SIGNAL'),set_extension(none,[identifier(none,'SIGNAL_OFF')]))]),assign(rodinpos(m6,init_CF_TESTING_sm,'_QbbeorkaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_sm_NULL')])],[]),event(rodinpos(m6,'User_PressesOn','_uXHVwLUpEeWNr7Z28XyZAh'),'User_PressesOn',ordinary(none),['User_PressesOn'],[],[equal(rodinpos(m6,isin_STANDBY,'_JjCZ8bR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m6,'CS_TopLevel_guards1','_0cjm0LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m6,enter_PREPARATION,'_JjCZ8rR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'PREPARATION')]),assign(rodinpos(m6,enter_CF_TESTING,'_ttVsI7R9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CF_TESTING')]),assign(rodinpos(m6,enter_CF_TESTING_SIGNAL_OFF,'_QbcFsLkaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_SIGNAL_OFF')])],[]),event(rodinpos(m6,'HDSystem_StartsConnectingPatient','_uXHVwLUpEeWNr7Z28XyZAi'),'HDSystem_StartsConnectingPatient',ordinary(none),['HDSystem_StartsConnectingPatient'],[],[equal(rodinpos(m6,isin_PREPARATION,'_JjCZ87R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION')),equal(rodinpos(m6,isin_DIALYZER_RINSING,'_ttVsJLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'DIALYZER_RINSING'))],[],[assign(rodinpos(m6,enter_INITIATION,'_JjDBALR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'INITIATION')]),assign(rodinpos(m6,leave_PREPARATION_sm,'_ttVsJbR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m6,enter_PATIENT_CONNECTING,'_ttVsJrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'PATIENT_CONNECTING')]),assign(rodinpos(m6,leave_CF_TESTING_sm,'_QbcFsbkaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_sm_NULL')])],[]),event(rodinpos(m6,'HDSystem_StartsReinfusion','_uXHVwLUpEeWNr7Z28XyZAj'),'HDSystem_StartsReinfusion',ordinary(none),['HDSystem_StartsReinfusion'],[],[equal(rodinpos(m6,isin_INITIATION,'_JjDBAbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'INITIATION')),equal(rodinpos(m6,isin_THERAPY,'_ttWTMLR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'THERAPY'))],[],[assign(rodinpos(m6,enter_ENDING,'_JjDBArR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'ENDING')]),assign(rodinpos(m6,leave_INITIATION_sm,'_ttWTMbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m6,enter_REINFUSION,'_ttWTMrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'REINFUSION')])],[]),event(rodinpos(m6,'User_PressesOff','_uXHVwLUpEeWNr7Z28XyZAk'),'User_PressesOff',ordinary(none),['User_PressesOff'],[],[equal(rodinpos(m6,isin_ENDING,'_JjDBA7R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'ENDING')),equal(rodinpos(m6,isin_THERAPY_OVERVIEWING,'_ttWTM7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'THERAPY_OVERVIEWING'))],[],[assign(rodinpos(m6,enter_STANDBY,'_JjDoELR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m6,leave_ENDING_sm,'_ttWTNLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')]),assign(rodinpos(m6,'CS_TopLevel_actions1','_yVpBwLhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[cartesian_product(none,identifier(none,'SIGNAL'),set_extension(none,[identifier(none,'SIGNAL_OFF')]))])],[]),event(rodinpos(m6,'CS_TopLevel_StartsConnectingConcentrate','_uXHVwLUpEeWNr7Z28XyZAl'),'CS_TopLevel_StartsConnectingConcentrate',ordinary(none),['CS_TopLevel_StartsConnectingConcentrate'],[],[equal(rodinpos(m6,isin_CF_TESTING,'_ttW6QLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m6,'PREPARATION_sm_guards1','_0cjm0bUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none)),equal(rodinpos(m6,isin_CF_TESTING_SIGNAL_GREEN,'_QbcFsrkaEeW2TOhOfFhbNg'),identifier(none,'CF_TESTING_sm'),identifier(none,'CF_TESTING_SIGNAL_GREEN'))],[],[assign(rodinpos(m6,enter_CONCENTRATE_CONNECTING,'_ttXhULR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CONCENTRATE_CONNECTING')]),assign(rodinpos(m6,leave_CF_TESTING_sm,'_QbcFs7kaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_sm_NULL')])],[]),event(rodinpos(m6,'HDSystem_StartsSettingRP','_uXHVwLUpEeWNr7Z28XyZAm'),'HDSystem_StartsSettingRP',ordinary(none),['HDSystem_StartsSettingRP'],[],[equal(rodinpos(m6,isin_CONCENTRATE_CONNECTING,'_ttXhUbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CONCENTRATE_CONNECTING'))],[],[assign(rodinpos(m6,enter_RP_SETTING,'_ttXhUrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'RP_SETTING')])],[]),event(rodinpos(m6,'HDSystem_StartsPreparingTS','_uXHVwLUpEeWNr7Z28XyZAn'),'HDSystem_StartsPreparingTS',ordinary(none),['HDSystem_StartsPreparingTS'],[],[equal(rodinpos(m6,isin_RP_SETTING,'_ttXhU7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'RP_SETTING'))],[],[assign(rodinpos(m6,enter_TS_PREPARING,'_ttXhVLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TS_PREPARING')])],[]),event(rodinpos(m6,'HDSystem_StartsPreparingHP','_uXHVwLUpEeWNr7Z28XyZAo'),'HDSystem_StartsPreparingHP',ordinary(none),['HDSystem_StartsPreparingHP'],[],[equal(rodinpos(m6,isin_TS_PREPARING,'_ttXhVbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TS_PREPARING'))],[],[assign(rodinpos(m6,enter_HP_PREPARING,'_ttYIYLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'HP_PREPARING')])],[]),event(rodinpos(m6,'HDSystem_StartsSettingTP','_uXHVwLUpEeWNr7Z28XyZAp'),'HDSystem_StartsSettingTP',ordinary(none),['HDSystem_StartsSettingTP'],[],[equal(rodinpos(m6,isin_HP_PREPARING,'_ttYIYbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'HP_PREPARING'))],[],[assign(rodinpos(m6,enter_TP_SETTING,'_ttYIYrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TP_SETTING')])],[]),event(rodinpos(m6,'HDSystem_StartsRinsingDialyzer','_uXHVwLUpEeWNr7Z28XyZAq'),'HDSystem_StartsRinsingDialyzer',ordinary(none),['HDSystem_StartsRinsingDialyzer'],[],[equal(rodinpos(m6,isin_TP_SETTING,'_ttYIY7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TP_SETTING'))],[],[assign(rodinpos(m6,enter_DIALYZER_RINSING,'_ttYIZLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'DIALYZER_RINSING')])],[]),event(rodinpos(m6,'HDSystem_StartsTherapy','_uXHVwLUpEeWNr7Z28XyZAr'),'HDSystem_StartsTherapy',ordinary(none),['HDSystem_StartsTherapy'],[],[equal(rodinpos(m6,isin_PATIENT_CONNECTING,'_ttYIZbR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'PATIENT_CONNECTING'))],[],[assign(rodinpos(m6,enter_THERAPY,'_ttYIZrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'THERAPY')])],[]),event(rodinpos(m6,'HDSystem_StartsEmptyingDialyzer','_uXHVwLUpEeWNr7Z28XyZAs'),'HDSystem_StartsEmptyingDialyzer',ordinary(none),['HDSystem_StartsEmptyingDialyzer'],[],[equal(rodinpos(m6,isin_REINFUSION,'_ttYvcLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'REINFUSION'))],[],[assign(rodinpos(m6,enter_DIALYZER_EMPTYING,'_ttYvcbR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'DIALYZER_EMPTYING')])],[]),event(rodinpos(m6,'HDSystem_StartsEmptyingCartridge','_uXHVwLUpEeWNr7Z28XyZAt'),'HDSystem_StartsEmptyingCartridge',ordinary(none),['HDSystem_StartsEmptyingCartridge'],[],[equal(rodinpos(m6,isin_DIALYZER_EMPTYING,'_ttYvcrR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'DIALYZER_EMPTYING'))],[],[assign(rodinpos(m6,enter_CARTRIDGE_EMPTYING,'_ttYvc7R9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'CARTRIDGE_EMPTYING')])],[]),event(rodinpos(m6,'HDSystem_StartsOverviewingTherapy','_uXHVwLUpEeWNr7Z28XyZAu'),'HDSystem_StartsOverviewingTherapy',ordinary(none),['HDSystem_StartsOverviewingTherapy'],[],[equal(rodinpos(m6,isin_CARTRIDGE_EMPTYING,'_ttYvdLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'CARTRIDGE_EMPTYING'))],[],[assign(rodinpos(m6,enter_THERAPY_OVERVIEWING,'_ttZWgLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'THERAPY_OVERVIEWING')])],[]),event(rodinpos(m6,'CS_LowLevel_StartsTestingCF','_uXHVwLUpEeWNr7Z28XyZAv'),'CS_LowLevel_StartsTestingCF',ordinary(none),['CS_LowLevel_StartsTestingCF'],[],[equal(rodinpos(m6,'CS_LowLevel_CFTesting_guards1','_0fmTwLUlEeWNr7Z28XyZAQ'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m6,isin_CS_LL_CF_NOT_TESTED,'_0fmTwbUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m6,leave_CS_LL_CF_NOT_TESTED,'_0fm60LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_false(none)]),assign(rodinpos(m6,enter_CS_LL_CF_TESTING,'_0fm60bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_true(none)]),assign(rodinpos(m6,act1,'('),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_true(none)])],[]),event(rodinpos(m6,'CS_LowLevel_StandsBy','_uXHVwLUpEeWNr7Z28XyZAw'),'CS_LowLevel_StandsBy',ordinary(none),['CS_LowLevel_StandsBy'],[],[equal(rodinpos(m6,'CS_LowLevel_CFTesting_guards2','_0fm60rUlEeWNr7Z28XyZAQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m6,isin_CS_LL_CF_TESTED_OK,'_0fm607UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m6,leave_CS_LL_CF_TESTED_OK,'_0fm61LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m6,enter_CS_LL_CF_NOT_TESTED,'_0fm61bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)]),assign(rodinpos(m6,'CS_LowLevel_CFTesting_actions1','_QfHEwLkaEeW2TOhOfFhbNg'),[identifier(none,signal_status)],[cartesian_product(none,identifier(none,'SIGNAL'),set_extension(none,[identifier(none,'SIGNAL_OFF')]))])],[]),event(rodinpos(m6,'CS_LowLevel_CFTestsOK','_uXHVwLUpEeWNr7Z28XyZAx'),'CS_LowLevel_CFTestsOK',ordinary(none),['CS_LowLevel_CFTestsOK'],[],[equal(rodinpos(m6,isin_CS_LL_CF_TESTING,'_0fnh4LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m6,'CS_LowLevel_CFTesting_guards3','_P7bT8LVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_true(none)),equal(rodinpos(m6,grd1,'('),identifier(none,'HD_2_CS_CFTestingFinished'),boolean_true(none))],[],[assign(rodinpos(m6,leave_CS_LL_CF_TESTING,'_0fnh4bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m6,enter_CS_LL_CF_TESTED_OK,'_0fnh4rUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_true(none)]),assign(rodinpos(m6,act1,')'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)])],[]),event(rodinpos(m6,'CS_LowLevel_CFTestsKO','_uXHVwLUpEeWNr7Z28XyZAy'),'CS_LowLevel_CFTestsKO',ordinary(none),['CS_LowLevel_CFTestsKO'],[],[equal(rodinpos(m6,isin_CS_LL_CF_TESTING,'_0fnh47UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m6,'CS_LowLevel_CFTesting_guards4','_P7bT8bVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_false(none)),equal(rodinpos(m6,grd1,'('),identifier(none,'HD_2_CS_CFTestingFinished'),boolean_true(none))],[],[assign(rodinpos(m6,leave_CS_LL_CF_TESTING,'_0fnh5LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m6,enter_CS_LL_CF_TESTED_KO,'_0fnh5bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_true(none)]),assign(rodinpos(m6,act1,')'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)])],[]),event(rodinpos(m6,'HDMachine_CFTests','_uXHVwLUpEeWNr7Z28XyZAz'),'HDMachine_CFTests',ordinary(none),['HDMachine_CFTests'],[],[equal(rodinpos(m6,grd1,'('),identifier(none,'CS_2_HD_StartsCFTesting'),boolean_true(none))],[],[becomes_element_of(rodinpos(m6,act1,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none)),assign(rodinpos(m6,act2,')'),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_false(none)]),assign(rodinpos(m6,act3,'*'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_true(none)])],[]),event(rodinpos(m6,'CS_TopLevel_CFTestingSignal2Green','_uXHVwLUpEeWNr7Z28XyZA{'),'CS_TopLevel_CFTestingSignal2Green',ordinary(none),['CS_TopLevel_SignalToGREEN'],[identifier(rodinpos(m6,[],'_ycDLwLhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m6,instanceType_sgn,'_ycDLwbhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m6,'ENVIRONMENT_guards1','_ycDLwrhTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m6,'CF_TESTING_sm_guards1','_QbdT0LkaEeW2TOhOfFhbNg'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none)),equal(rodinpos(m6,isin_CF_TESTING_SIGNAL_OFF,'_QbdT0bkaEeW2TOhOfFhbNg'),identifier(none,'CF_TESTING_sm'),identifier(none,'CF_TESTING_SIGNAL_OFF')),equal(rodinpos(m6,'ENVIRONMENT_guards3','_QiRtgLkaEeW2TOhOfFhbNg'),identifier(none,sgn),identifier(none,'CF_TESTING_SIGNAL'))],[],[assign(rodinpos(m6,'ENVIRONMENT_actions1','_ycDy0LhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_GREEN')])]))]),assign(rodinpos(m6,enter_CF_TESTING_SIGNAL_GREEN,'_QbdT0rkaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_SIGNAL_GREEN')])],[]),event(rodinpos(m6,'CS_TopLevel_CFTestingSignal2Red','_uXHVwLUpEeWNr7Z28XyZA|'),'CS_TopLevel_CFTestingSignal2Red',ordinary(none),['CS_TopLevel_SignalToRED'],[identifier(rodinpos(m6,[],'_ycDy0bhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m6,instanceType_sgn,'_ycDy0rhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m6,'ENVIRONMENT_guards2','_ycDy07hTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m6,'CF_TESTING_sm_guards2','_Qbd64LkaEeW2TOhOfFhbNg'),identifier(none,'CS_LL_CF_TESTED_KO'),boolean_true(none)),equal(rodinpos(m6,isin_CF_TESTING_SIGNAL_OFF,'_Qbd64bkaEeW2TOhOfFhbNg'),identifier(none,'CF_TESTING_sm'),identifier(none,'CF_TESTING_SIGNAL_OFF')),equal(rodinpos(m6,'ENVIRONMENT_guards4','_QiRtgbkaEeW2TOhOfFhbNg'),identifier(none,sgn),identifier(none,'CF_TESTING_SIGNAL'))],[],[assign(rodinpos(m6,'ENVIRONMENT_actions2','_ycDy1LhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_RED')])]))]),assign(rodinpos(m6,enter_CF_TESTING_SIGNAL_RED,'_Qbd64rkaEeW2TOhOfFhbNg'),[identifier(none,'CF_TESTING_sm')],[identifier(none,'CF_TESTING_SIGNAL_RED')])],[]),event(rodinpos(m6,'CS_TopLevel_SignalToGREEN','_PM09kLhWEeWeLteVXSdMfg'),'CS_TopLevel_SignalToGREEN',ordinary(none),['CS_TopLevel_SignalToGREEN'],[identifier(rodinpos(m6,[],'_ycDLwLhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m6,instanceType_sgn,'_ycDLwbhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m6,'ENVIRONMENT_guards1','_ycDLwrhTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),not_equal(rodinpos(m6,'ENVIRONMENT_guards2','_QiTisLkaEeW2TOhOfFhbNg'),identifier(none,sgn),identifier(none,'CF_TESTING_SIGNAL'))],[],[assign(rodinpos(m6,'ENVIRONMENT_actions1','_ycDy0LhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_GREEN')])]))])],[]),event(rodinpos(m6,'CS_TopLevel_SignalToRED','_NCmFMLhXEeWeLteVXSdMfg'),'CS_TopLevel_SignalToRED',ordinary(none),['CS_TopLevel_SignalToRED'],[identifier(rodinpos(m6,[],'_ycDy0bhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m6,instanceType_sgn,'_ycDy0rhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m6,'ENVIRONMENT_guards2','_ycDy07hTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),not_equal(rodinpos(m6,'ENVIRONMENT_guards1','_QiTisbkaEeW2TOhOfFhbNg'),identifier(none,sgn),identifier(none,'CF_TESTING_SIGNAL'))],[],[assign(rodinpos(m6,'ENVIRONMENT_actions2','_ycDy1LhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_RED')])]))])],[]),event(rodinpos(m6,'CS_TopLevel_SignalToORANGE','_VWt3gLhXEeWeLteVXSdMfg'),'CS_TopLevel_SignalToORANGE',ordinary(none),['CS_TopLevel_SignalToORANGE'],[identifier(rodinpos(m6,[],'_ycDy1bhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m6,instanceType_sgn,'_ycDy1rhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m6,'ENVIRONMENT_guards3','_ycEZ4LhTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),not_equal(rodinpos(m6,'ENVIRONMENT_guards1','_QiTisrkaEeW2TOhOfFhbNg'),identifier(none,sgn),identifier(none,'CF_TESTING_SIGNAL'))],[],[assign(rodinpos(m6,'ENVIRONMENT_actions3','_ycEZ4bhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_ORANGE')])]))])],[])])]),event_b_model(none,m5,[sees(none,[m0_implicitContext,m1_implicitContext,m2_implicitContext,m3_implicitContext,m4_implicitContext,m5_implicitContext,'c5-signals']),refines(none,m4),variables(none,[identifier(none,signal_status),identifier(none,'CS_LL_CF_TESTED_KO'),identifier(none,'CS_TopLevel'),identifier(none,'CS_LL_CF_TESTED_OK'),identifier(none,'CS_LL_CF_NOT_TESTED'),identifier(none,'CS_2_HD_StartsCFTesting'),identifier(none,'HD_2_CS_CFTestingFinished'),identifier(none,'HDMachine_CFTestedOK'),identifier(none,'CS_LL_CF_TESTING'),identifier(none,'INITIATION_sm'),identifier(none,'ENDING_sm'),identifier(none,'PREPARATION_sm')]),invariant(none,[member(rodinpos(m5,attribType_signal_status,'_ycEZ4rhTEeWZYZ7CLrnHEQ'),identifier(none,signal_status),total_function(none,identifier(none,'SIGNAL'),identifier(none,'SIGNAL_STATUS'))),implication(rodinpos(m5,'CS_TopLevel_invariants1','_yVreALhTEeWZYZ7CLrnHEQ'),equal(none,identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(none,identifier(none,signal_status),cartesian_product(none,identifier(none,'SIGNAL'),set_extension(none,[identifier(none,'SIGNAL_OFF')]))))]),theorems(none,[]),events(none,[event(rodinpos(m5,'INITIALISATION','_uXHVwLUpEeWNr7Z28XyZAR'),'INITIALISATION',ordinary(none),['INITIALISATION'],[],[],[],[assign(rodinpos(m5,init_CS_TopLevel,'_JjCZ8LR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m5,init_PREPARATION_sm,'_ttVsILR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m5,init_INITIATION_sm,'_ttVsIbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m5,init_ENDING_sm,'_ttVsIrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')]),assign(rodinpos(m5,init_CS_LL_CF_NOT_TESTED,'_0fj3gLUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)]),assign(rodinpos(m5,init_CS_LL_CF_TESTING,'_0fj3gbUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m5,init_CS_LL_CF_TESTED_OK,'_0fj3grUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m5,init_CS_LL_CF_TESTED_KO,'_0fj3g7UlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_false(none)]),becomes_element_of(rodinpos(m5,init_HDMachine_CFTestedOK,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none)),assign(rodinpos(m5,act1,'\''),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_false(none)]),assign(rodinpos(m5,act2,'('),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)]),assign(rodinpos(m5,init_signal_status,'_ycAIcLhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[cartesian_product(none,identifier(none,'SIGNAL'),set_extension(none,[identifier(none,'SIGNAL_OFF')]))])],[]),event(rodinpos(m5,'User_PressesOn','_uXHVwLUpEeWNr7Z28XyZAS'),'User_PressesOn',ordinary(none),['User_PressesOn'],[],[equal(rodinpos(m5,isin_STANDBY,'_JjCZ8bR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m5,'CS_TopLevel_guards1','_0cjm0LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m5,enter_PREPARATION,'_JjCZ8rR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'PREPARATION')]),assign(rodinpos(m5,enter_CF_TESTING,'_ttVsI7R9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CF_TESTING')])],[]),event(rodinpos(m5,'HDSystem_StartsConnectingPatient','_uXHVwLUpEeWNr7Z28XyZAT'),'HDSystem_StartsConnectingPatient',ordinary(none),['HDSystem_StartsConnectingPatient'],[],[equal(rodinpos(m5,isin_PREPARATION,'_JjCZ87R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION')),equal(rodinpos(m5,isin_DIALYZER_RINSING,'_ttVsJLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'DIALYZER_RINSING'))],[],[assign(rodinpos(m5,enter_INITIATION,'_JjDBALR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'INITIATION')]),assign(rodinpos(m5,leave_PREPARATION_sm,'_ttVsJbR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m5,enter_PATIENT_CONNECTING,'_ttVsJrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'PATIENT_CONNECTING')])],[]),event(rodinpos(m5,'HDSystem_StartsReinfusion','_uXHVwLUpEeWNr7Z28XyZAU'),'HDSystem_StartsReinfusion',ordinary(none),['HDSystem_StartsReinfusion'],[],[equal(rodinpos(m5,isin_INITIATION,'_JjDBAbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'INITIATION')),equal(rodinpos(m5,isin_THERAPY,'_ttWTMLR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'THERAPY'))],[],[assign(rodinpos(m5,enter_ENDING,'_JjDBArR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'ENDING')]),assign(rodinpos(m5,leave_INITIATION_sm,'_ttWTMbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m5,enter_REINFUSION,'_ttWTMrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'REINFUSION')])],[]),event(rodinpos(m5,'User_PressesOff','_uXHVwLUpEeWNr7Z28XyZAV'),'User_PressesOff',ordinary(none),['User_PressesOff'],[],[equal(rodinpos(m5,isin_ENDING,'_JjDBA7R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'ENDING')),equal(rodinpos(m5,isin_THERAPY_OVERVIEWING,'_ttWTM7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'THERAPY_OVERVIEWING'))],[],[assign(rodinpos(m5,enter_STANDBY,'_JjDoELR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m5,leave_ENDING_sm,'_ttWTNLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')]),assign(rodinpos(m5,'CS_TopLevel_actions1','_yVpBwLhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[cartesian_product(none,identifier(none,'SIGNAL'),set_extension(none,[identifier(none,'SIGNAL_OFF')]))])],[]),event(rodinpos(m5,'CS_TopLevel_StartsConnectingConcentrate','_uXHVwLUpEeWNr7Z28XyZAW'),'CS_TopLevel_StartsConnectingConcentrate',ordinary(none),['CS_TopLevel_StartsConnectingConcentrate'],[],[equal(rodinpos(m5,isin_CF_TESTING,'_ttW6QLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m5,'PREPARATION_sm_guards1','_0cjm0bUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m5,enter_CONCENTRATE_CONNECTING,'_ttXhULR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CONCENTRATE_CONNECTING')])],[]),event(rodinpos(m5,'HDSystem_StartsSettingRP','_uXHVwLUpEeWNr7Z28XyZAX'),'HDSystem_StartsSettingRP',ordinary(none),['HDSystem_StartsSettingRP'],[],[equal(rodinpos(m5,isin_CONCENTRATE_CONNECTING,'_ttXhUbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CONCENTRATE_CONNECTING'))],[],[assign(rodinpos(m5,enter_RP_SETTING,'_ttXhUrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'RP_SETTING')])],[]),event(rodinpos(m5,'HDSystem_StartsPreparingTS','_uXHVwLUpEeWNr7Z28XyZAY'),'HDSystem_StartsPreparingTS',ordinary(none),['HDSystem_StartsPreparingTS'],[],[equal(rodinpos(m5,isin_RP_SETTING,'_ttXhU7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'RP_SETTING'))],[],[assign(rodinpos(m5,enter_TS_PREPARING,'_ttXhVLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TS_PREPARING')])],[]),event(rodinpos(m5,'HDSystem_StartsPreparingHP','_uXHVwLUpEeWNr7Z28XyZAZ'),'HDSystem_StartsPreparingHP',ordinary(none),['HDSystem_StartsPreparingHP'],[],[equal(rodinpos(m5,isin_TS_PREPARING,'_ttXhVbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TS_PREPARING'))],[],[assign(rodinpos(m5,enter_HP_PREPARING,'_ttYIYLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'HP_PREPARING')])],[]),event(rodinpos(m5,'HDSystem_StartsSettingTP','_uXHVwLUpEeWNr7Z28XyZA['),'HDSystem_StartsSettingTP',ordinary(none),['HDSystem_StartsSettingTP'],[],[equal(rodinpos(m5,isin_HP_PREPARING,'_ttYIYbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'HP_PREPARING'))],[],[assign(rodinpos(m5,enter_TP_SETTING,'_ttYIYrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TP_SETTING')])],[]),event(rodinpos(m5,'HDSystem_StartsRinsingDialyzer','_uXHVwLUpEeWNr7Z28XyZA\\'),'HDSystem_StartsRinsingDialyzer',ordinary(none),['HDSystem_StartsRinsingDialyzer'],[],[equal(rodinpos(m5,isin_TP_SETTING,'_ttYIY7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TP_SETTING'))],[],[assign(rodinpos(m5,enter_DIALYZER_RINSING,'_ttYIZLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'DIALYZER_RINSING')])],[]),event(rodinpos(m5,'HDSystem_StartsTherapy','_uXHVwLUpEeWNr7Z28XyZA]'),'HDSystem_StartsTherapy',ordinary(none),['HDSystem_StartsTherapy'],[],[equal(rodinpos(m5,isin_PATIENT_CONNECTING,'_ttYIZbR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'PATIENT_CONNECTING'))],[],[assign(rodinpos(m5,enter_THERAPY,'_ttYIZrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'THERAPY')])],[]),event(rodinpos(m5,'HDSystem_StartsEmptyingDialyzer','_uXHVwLUpEeWNr7Z28XyZA^'),'HDSystem_StartsEmptyingDialyzer',ordinary(none),['HDSystem_StartsEmptyingDialyzer'],[],[equal(rodinpos(m5,isin_REINFUSION,'_ttYvcLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'REINFUSION'))],[],[assign(rodinpos(m5,enter_DIALYZER_EMPTYING,'_ttYvcbR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'DIALYZER_EMPTYING')])],[]),event(rodinpos(m5,'HDSystem_StartsEmptyingCartridge','_uXHVwLUpEeWNr7Z28XyZA_'),'HDSystem_StartsEmptyingCartridge',ordinary(none),['HDSystem_StartsEmptyingCartridge'],[],[equal(rodinpos(m5,isin_DIALYZER_EMPTYING,'_ttYvcrR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'DIALYZER_EMPTYING'))],[],[assign(rodinpos(m5,enter_CARTRIDGE_EMPTYING,'_ttYvc7R9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'CARTRIDGE_EMPTYING')])],[]),event(rodinpos(m5,'HDSystem_StartsOverviewingTherapy','_uXHVwLUpEeWNr7Z28XyZA\140\'),'HDSystem_StartsOverviewingTherapy',ordinary(none),['HDSystem_StartsOverviewingTherapy'],[],[equal(rodinpos(m5,isin_CARTRIDGE_EMPTYING,'_ttYvdLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'CARTRIDGE_EMPTYING'))],[],[assign(rodinpos(m5,enter_THERAPY_OVERVIEWING,'_ttZWgLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'THERAPY_OVERVIEWING')])],[]),event(rodinpos(m5,'CS_LowLevel_StartsTestingCF','_uXHVwLUpEeWNr7Z28XyZAa'),'CS_LowLevel_StartsTestingCF',ordinary(none),['CS_LowLevel_StartsTestingCF'],[],[equal(rodinpos(m5,'CS_LowLevel_CFTesting_guards1','_0fmTwLUlEeWNr7Z28XyZAQ'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m5,isin_CS_LL_CF_NOT_TESTED,'_0fmTwbUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m5,leave_CS_LL_CF_NOT_TESTED,'_0fm60LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_false(none)]),assign(rodinpos(m5,enter_CS_LL_CF_TESTING,'_0fm60bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_true(none)]),assign(rodinpos(m5,act1,'('),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_true(none)])],[]),event(rodinpos(m5,'CS_LowLevel_StandsBy','_uXHVwLUpEeWNr7Z28XyZAb'),'CS_LowLevel_StandsBy',ordinary(none),['CS_LowLevel_StandsBy'],[],[equal(rodinpos(m5,'CS_LowLevel_CFTesting_guards2','_0fm60rUlEeWNr7Z28XyZAQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m5,isin_CS_LL_CF_TESTED_OK,'_0fm607UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m5,leave_CS_LL_CF_TESTED_OK,'_0fm61LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m5,enter_CS_LL_CF_NOT_TESTED,'_0fm61bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)])],[]),event(rodinpos(m5,'CS_LowLevel_CFTestsOK','_uXHVwLUpEeWNr7Z28XyZAc'),'CS_LowLevel_CFTestsOK',ordinary(none),['CS_LowLevel_CFTestsOK'],[],[equal(rodinpos(m5,isin_CS_LL_CF_TESTING,'_0fnh4LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m5,'CS_LowLevel_CFTesting_guards3','_P7bT8LVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_true(none)),equal(rodinpos(m5,grd1,'('),identifier(none,'HD_2_CS_CFTestingFinished'),boolean_true(none))],[],[assign(rodinpos(m5,leave_CS_LL_CF_TESTING,'_0fnh4bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m5,enter_CS_LL_CF_TESTED_OK,'_0fnh4rUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_true(none)]),assign(rodinpos(m5,act1,')'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)])],[]),event(rodinpos(m5,'CS_LowLevel_CFTestsKO','_uXHVwLUpEeWNr7Z28XyZAd'),'CS_LowLevel_CFTestsKO',ordinary(none),['CS_LowLevel_CFTestsKO'],[],[equal(rodinpos(m5,isin_CS_LL_CF_TESTING,'_0fnh47UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m5,'CS_LowLevel_CFTesting_guards4','_P7bT8bVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_false(none)),equal(rodinpos(m5,grd1,'('),identifier(none,'HD_2_CS_CFTestingFinished'),boolean_true(none))],[],[assign(rodinpos(m5,leave_CS_LL_CF_TESTING,'_0fnh5LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m5,enter_CS_LL_CF_TESTED_KO,'_0fnh5bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_true(none)]),assign(rodinpos(m5,act1,')'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)])],[]),event(rodinpos(m5,'HDMachine_CFTests','_uXHVwLUpEeWNr7Z28XyZAe'),'HDMachine_CFTests',ordinary(none),['HDMachine_CFTests'],[],[equal(rodinpos(m5,grd1,'('),identifier(none,'CS_2_HD_StartsCFTesting'),boolean_true(none))],[],[becomes_element_of(rodinpos(m5,act1,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none)),assign(rodinpos(m5,act2,')'),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_false(none)]),assign(rodinpos(m5,act3,'*'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_true(none)])],[]),event(rodinpos(m5,'CS_TopLevel_SignalToGREEN','_KQ860LYkEeWZYZ7CLrnHEQ'),'CS_TopLevel_SignalToGREEN',ordinary(none),[],[identifier(rodinpos(m5,[],'_ycDLwLhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m5,instanceType_sgn,'_ycDLwbhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m5,'ENVIRONMENT_guards1','_ycDLwrhTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY'))],[],[assign(rodinpos(m5,'ENVIRONMENT_actions1','_ycDy0LhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_GREEN')])]))])],[]),event(rodinpos(m5,'CS_TopLevel_SignalToRED','_hMfpgLYkEeWZYZ7CLrnHEQ'),'CS_TopLevel_SignalToRED',ordinary(none),[],[identifier(rodinpos(m5,[],'_ycDy0bhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m5,instanceType_sgn,'_ycDy0rhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m5,'ENVIRONMENT_guards2','_ycDy07hTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY'))],[],[assign(rodinpos(m5,'ENVIRONMENT_actions2','_ycDy1LhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_RED')])]))])],[]),event(rodinpos(m5,'CS_TopLevel_SignalToORANGE','_SjJn4LhQEeWZYZ7CLrnHEQ'),'CS_TopLevel_SignalToORANGE',ordinary(none),[],[identifier(rodinpos(m5,[],'_ycDy1bhTEeWZYZ7CLrnHEQ'),sgn)],[member(rodinpos(m5,instanceType_sgn,'_ycDy1rhTEeWZYZ7CLrnHEQ'),identifier(none,sgn),identifier(none,'SIGNAL')),not_equal(rodinpos(m5,'ENVIRONMENT_guards3','_ycEZ4LhTEeWZYZ7CLrnHEQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY'))],[],[assign(rodinpos(m5,'ENVIRONMENT_actions3','_ycEZ4bhTEeWZYZ7CLrnHEQ'),[identifier(none,signal_status)],[overwrite(none,identifier(none,signal_status),set_extension(none,[couple(none,[identifier(none,sgn),identifier(none,'SIGNAL_ORANGE')])]))])],[])])]),event_b_model(none,m4,[sees(none,[m0_implicitContext,m1_implicitContext,m2_implicitContext,m3_implicitContext,m4_implicitContext]),refines(none,m3),variables(none,[identifier(none,'CS_LL_CF_TESTED_KO'),identifier(none,'CS_TopLevel'),identifier(none,'CS_LL_CF_TESTED_OK'),identifier(none,'CS_LL_CF_NOT_TESTED'),identifier(none,'CS_2_HD_StartsCFTesting'),identifier(none,'HD_2_CS_CFTestingFinished'),identifier(none,'HDMachine_CFTestedOK'),identifier(none,'CS_LL_CF_TESTING'),identifier(none,'INITIATION_sm'),identifier(none,'ENDING_sm'),identifier(none,'PREPARATION_sm')]),invariant(none,[implication(rodinpos(m4,'CS_LowLevel_CFTesting_invariants2','_ZlDgoLVsEeWZYZ7CLrnHEQ'),equal(none,identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none)),equal(none,identifier(none,'HD_2_CS_CFTestingFinished'),boolean_false(none))),implication(rodinpos(m4,'CS_LowLevel_CFTesting_invariants1','_ZlDgobVsEeWZYZ7CLrnHEQ'),equal(none,identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none)),equal(none,identifier(none,'HD_2_CS_CFTestingFinished'),boolean_false(none))),implication(rodinpos(m4,'CS_LowLevel_CFTesting_invariants3','_ZlDgorVsEeWZYZ7CLrnHEQ'),equal(none,identifier(none,'CS_LL_CF_TESTED_KO'),boolean_true(none)),equal(none,identifier(none,'HD_2_CS_CFTestingFinished'),boolean_false(none))),implication(rodinpos(m4,inv1,'_buRZULSPEeW1p-Q_lMMcSX'),equal(none,identifier(none,'CS_2_HD_StartsCFTesting'),boolean_true(none)),equal(none,identifier(none,'CS_LL_CF_TESTING'),boolean_true(none))),implication(rodinpos(m4,inv2,'_buRZULSPEeW1p-Q_lMMcSZ'),equal(none,identifier(none,'HD_2_CS_CFTestingFinished'),boolean_true(none)),equal(none,identifier(none,'CS_2_HD_StartsCFTesting'),boolean_false(none)))]),theorems(none,[]),events(none,[event(rodinpos(m4,'INITIALISATION','_buRZULSPEeW1p-Q_lMMcSC'),'INITIALISATION',ordinary(none),['INITIALISATION'],[],[],[],[assign(rodinpos(m4,init_CS_TopLevel,'_JjCZ8LR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m4,init_PREPARATION_sm,'_ttVsILR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m4,init_INITIATION_sm,'_ttVsIbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m4,init_ENDING_sm,'_ttVsIrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')]),assign(rodinpos(m4,init_CS_LL_CF_NOT_TESTED,'_0fj3gLUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)]),assign(rodinpos(m4,init_CS_LL_CF_TESTING,'_0fj3gbUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m4,init_CS_LL_CF_TESTED_OK,'_0fj3grUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m4,init_CS_LL_CF_TESTED_KO,'_0fj3g7UlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_false(none)]),becomes_element_of(rodinpos(m4,init_HDMachine_CFTestedOK,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none)),assign(rodinpos(m4,act1,'\''),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_false(none)]),assign(rodinpos(m4,act2,'('),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)])],[]),event(rodinpos(m4,'User_PressesOn','_buRZULSPEeW1p-Q_lMMcSD'),'User_PressesOn',ordinary(none),['User_PressesOn'],[],[equal(rodinpos(m4,isin_STANDBY,'_JjCZ8bR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m4,'CS_TopLevel_guards1','_0cjm0LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m4,enter_PREPARATION,'_JjCZ8rR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'PREPARATION')]),assign(rodinpos(m4,enter_CF_TESTING,'_ttVsI7R9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CF_TESTING')])],[]),event(rodinpos(m4,'HDSystem_StartsConnectingPatient','_buRZULSPEeW1p-Q_lMMcSE'),'HDSystem_StartsConnectingPatient',ordinary(none),['HDSystem_StartsConnectingPatient'],[],[equal(rodinpos(m4,isin_PREPARATION,'_JjCZ87R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION')),equal(rodinpos(m4,isin_DIALYZER_RINSING,'_ttVsJLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'DIALYZER_RINSING'))],[],[assign(rodinpos(m4,enter_INITIATION,'_JjDBALR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'INITIATION')]),assign(rodinpos(m4,leave_PREPARATION_sm,'_ttVsJbR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m4,enter_PATIENT_CONNECTING,'_ttVsJrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'PATIENT_CONNECTING')])],[]),event(rodinpos(m4,'HDSystem_StartsReinfusion','_buRZULSPEeW1p-Q_lMMcSF'),'HDSystem_StartsReinfusion',ordinary(none),['HDSystem_StartsReinfusion'],[],[equal(rodinpos(m4,isin_INITIATION,'_JjDBAbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'INITIATION')),equal(rodinpos(m4,isin_THERAPY,'_ttWTMLR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'THERAPY'))],[],[assign(rodinpos(m4,enter_ENDING,'_JjDBArR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'ENDING')]),assign(rodinpos(m4,leave_INITIATION_sm,'_ttWTMbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m4,enter_REINFUSION,'_ttWTMrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'REINFUSION')])],[]),event(rodinpos(m4,'User_PressesOff','_buRZULSPEeW1p-Q_lMMcSG'),'User_PressesOff',ordinary(none),['User_PressesOff'],[],[equal(rodinpos(m4,isin_ENDING,'_JjDBA7R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'ENDING')),equal(rodinpos(m4,isin_THERAPY_OVERVIEWING,'_ttWTM7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'THERAPY_OVERVIEWING'))],[],[assign(rodinpos(m4,enter_STANDBY,'_JjDoELR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m4,leave_ENDING_sm,'_ttWTNLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')])],[]),event(rodinpos(m4,'CS_TopLevel_StartsConnectingConcentrate','_buRZULSPEeW1p-Q_lMMcSH'),'CS_TopLevel_StartsConnectingConcentrate',ordinary(none),['CS_TopLevel_StartsConnectingConcentrate'],[],[equal(rodinpos(m4,isin_CF_TESTING,'_ttW6QLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m4,'PREPARATION_sm_guards1','_0cjm0bUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m4,enter_CONCENTRATE_CONNECTING,'_ttXhULR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CONCENTRATE_CONNECTING')])],[]),event(rodinpos(m4,'HDSystem_StartsSettingRP','_buRZULSPEeW1p-Q_lMMcSI'),'HDSystem_StartsSettingRP',ordinary(none),['HDSystem_StartsSettingRP'],[],[equal(rodinpos(m4,isin_CONCENTRATE_CONNECTING,'_ttXhUbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CONCENTRATE_CONNECTING'))],[],[assign(rodinpos(m4,enter_RP_SETTING,'_ttXhUrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'RP_SETTING')])],[]),event(rodinpos(m4,'HDSystem_StartsPreparingTS','_buRZULSPEeW1p-Q_lMMcSJ'),'HDSystem_StartsPreparingTS',ordinary(none),['HDSystem_StartsPreparingTS'],[],[equal(rodinpos(m4,isin_RP_SETTING,'_ttXhU7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'RP_SETTING'))],[],[assign(rodinpos(m4,enter_TS_PREPARING,'_ttXhVLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TS_PREPARING')])],[]),event(rodinpos(m4,'HDSystem_StartsPreparingHP','_buRZULSPEeW1p-Q_lMMcSK'),'HDSystem_StartsPreparingHP',ordinary(none),['HDSystem_StartsPreparingHP'],[],[equal(rodinpos(m4,isin_TS_PREPARING,'_ttXhVbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TS_PREPARING'))],[],[assign(rodinpos(m4,enter_HP_PREPARING,'_ttYIYLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'HP_PREPARING')])],[]),event(rodinpos(m4,'HDSystem_StartsSettingTP','_buRZULSPEeW1p-Q_lMMcSL'),'HDSystem_StartsSettingTP',ordinary(none),['HDSystem_StartsSettingTP'],[],[equal(rodinpos(m4,isin_HP_PREPARING,'_ttYIYbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'HP_PREPARING'))],[],[assign(rodinpos(m4,enter_TP_SETTING,'_ttYIYrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TP_SETTING')])],[]),event(rodinpos(m4,'HDSystem_StartsRinsingDialyzer','_buRZULSPEeW1p-Q_lMMcSM'),'HDSystem_StartsRinsingDialyzer',ordinary(none),['HDSystem_StartsRinsingDialyzer'],[],[equal(rodinpos(m4,isin_TP_SETTING,'_ttYIY7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TP_SETTING'))],[],[assign(rodinpos(m4,enter_DIALYZER_RINSING,'_ttYIZLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'DIALYZER_RINSING')])],[]),event(rodinpos(m4,'HDSystem_StartsTherapy','_buRZULSPEeW1p-Q_lMMcSN'),'HDSystem_StartsTherapy',ordinary(none),['HDSystem_StartsTherapy'],[],[equal(rodinpos(m4,isin_PATIENT_CONNECTING,'_ttYIZbR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'PATIENT_CONNECTING'))],[],[assign(rodinpos(m4,enter_THERAPY,'_ttYIZrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'THERAPY')])],[]),event(rodinpos(m4,'HDSystem_StartsEmptyingDialyzer','_buRZULSPEeW1p-Q_lMMcSO'),'HDSystem_StartsEmptyingDialyzer',ordinary(none),['HDSystem_StartsEmptyingDialyzer'],[],[equal(rodinpos(m4,isin_REINFUSION,'_ttYvcLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'REINFUSION'))],[],[assign(rodinpos(m4,enter_DIALYZER_EMPTYING,'_ttYvcbR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'DIALYZER_EMPTYING')])],[]),event(rodinpos(m4,'HDSystem_StartsEmptyingCartridge','_buRZULSPEeW1p-Q_lMMcSP'),'HDSystem_StartsEmptyingCartridge',ordinary(none),['HDSystem_StartsEmptyingCartridge'],[],[equal(rodinpos(m4,isin_DIALYZER_EMPTYING,'_ttYvcrR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'DIALYZER_EMPTYING'))],[],[assign(rodinpos(m4,enter_CARTRIDGE_EMPTYING,'_ttYvc7R9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'CARTRIDGE_EMPTYING')])],[]),event(rodinpos(m4,'HDSystem_StartsOverviewingTherapy','_buRZULSPEeW1p-Q_lMMcSQ'),'HDSystem_StartsOverviewingTherapy',ordinary(none),['HDSystem_StartsOverviewingTherapy'],[],[equal(rodinpos(m4,isin_CARTRIDGE_EMPTYING,'_ttYvdLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'CARTRIDGE_EMPTYING'))],[],[assign(rodinpos(m4,enter_THERAPY_OVERVIEWING,'_ttZWgLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'THERAPY_OVERVIEWING')])],[]),event(rodinpos(m4,'CS_LowLevel_StartsTestingCF','_buRZULSPEeW1p-Q_lMMcSR'),'CS_LowLevel_StartsTestingCF',ordinary(none),['CS_LowLevel_StartsTestingCF'],[],[equal(rodinpos(m4,'CS_LowLevel_CFTesting_guards1','_0fmTwLUlEeWNr7Z28XyZAQ'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m4,isin_CS_LL_CF_NOT_TESTED,'_0fmTwbUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m4,leave_CS_LL_CF_NOT_TESTED,'_0fm60LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_false(none)]),assign(rodinpos(m4,enter_CS_LL_CF_TESTING,'_0fm60bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_true(none)]),assign(rodinpos(m4,act1,'('),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_true(none)])],[]),event(rodinpos(m4,'CS_LowLevel_StandsBy','_buRZULSPEeW1p-Q_lMMcSS'),'CS_LowLevel_StandsBy',ordinary(none),['CS_LowLevel_StandsBy'],[],[equal(rodinpos(m4,'CS_LowLevel_CFTesting_guards2','_0fm60rUlEeWNr7Z28XyZAQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m4,isin_CS_LL_CF_TESTED_OK,'_0fm607UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m4,leave_CS_LL_CF_TESTED_OK,'_0fm61LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m4,enter_CS_LL_CF_NOT_TESTED,'_0fm61bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)])],[]),event(rodinpos(m4,'CS_LowLevel_CFTestsOK','_buRZULSPEeW1p-Q_lMMcST'),'CS_LowLevel_CFTestsOK',ordinary(none),['CS_LowLevel_CFTestsOK'],[],[equal(rodinpos(m4,isin_CS_LL_CF_TESTING,'_0fnh4LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m4,'CS_LowLevel_CFTesting_guards3','_P7bT8LVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_true(none)),equal(rodinpos(m4,grd1,'('),identifier(none,'HD_2_CS_CFTestingFinished'),boolean_true(none))],[],[assign(rodinpos(m4,leave_CS_LL_CF_TESTING,'_0fnh4bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m4,enter_CS_LL_CF_TESTED_OK,'_0fnh4rUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_true(none)]),assign(rodinpos(m4,act1,')'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)])],[]),event(rodinpos(m4,'CS_LowLevel_CFTestsKO','_buRZULSPEeW1p-Q_lMMcSU'),'CS_LowLevel_CFTestsKO',ordinary(none),['CS_LowLevel_CFTestsKO'],[],[equal(rodinpos(m4,isin_CS_LL_CF_TESTING,'_0fnh47UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m4,'CS_LowLevel_CFTesting_guards4','_P7bT8bVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_false(none)),equal(rodinpos(m4,grd1,'('),identifier(none,'HD_2_CS_CFTestingFinished'),boolean_true(none))],[],[assign(rodinpos(m4,leave_CS_LL_CF_TESTING,'_0fnh5LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m4,enter_CS_LL_CF_TESTED_KO,'_0fnh5bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_true(none)]),assign(rodinpos(m4,act1,')'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_false(none)])],[]),event(rodinpos(m4,'HDMachine_CFTests','_buRZULSPEeW1p-Q_lMMcSV'),'HDMachine_CFTests',ordinary(none),['HDMachine_CFTests'],[],[equal(rodinpos(m4,grd1,'('),identifier(none,'CS_2_HD_StartsCFTesting'),boolean_true(none))],[],[becomes_element_of(rodinpos(m4,act1,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none)),assign(rodinpos(m4,act2,')'),[identifier(none,'CS_2_HD_StartsCFTesting')],[boolean_false(none)]),assign(rodinpos(m4,act3,'*'),[identifier(none,'HD_2_CS_CFTestingFinished')],[boolean_true(none)])],[])])]),event_b_model(none,m3,[sees(none,[m0_implicitContext,m1_implicitContext,m2_implicitContext,m3_implicitContext]),refines(none,m2),variables(none,[identifier(none,'CS_LL_CF_TESTED_KO'),identifier(none,'CS_TopLevel'),identifier(none,'CS_LL_CF_TESTED_OK'),identifier(none,'CS_LL_CF_NOT_TESTED'),identifier(none,'HDMachine_CFTestedOK'),identifier(none,'CS_LL_CF_TESTING'),identifier(none,'INITIATION_sm'),identifier(none,'ENDING_sm'),identifier(none,'PREPARATION_sm')]),invariant(none,[]),theorems(none,[member(rodinpos(m3,'HDMachine_CFTestedOK_TYPE','_buRZULSPEeW1p-Q_lMMcSC'),identifier(none,'HDMachine_CFTestedOK'),bool_set(none))]),events(none,[event(rodinpos(m3,'INITIALISATION','_bPvj4LSHEeW1p-Q_lMMcSB'),'INITIALISATION',ordinary(none),['INITIALISATION'],[],[],[],[assign(rodinpos(m3,init_CS_TopLevel,'_JjCZ8LR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m3,init_PREPARATION_sm,'_ttVsILR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m3,init_INITIATION_sm,'_ttVsIbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m3,init_ENDING_sm,'_ttVsIrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')]),assign(rodinpos(m3,init_CS_LL_CF_NOT_TESTED,'_0fj3gLUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)]),assign(rodinpos(m3,init_CS_LL_CF_TESTING,'_0fj3gbUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m3,init_CS_LL_CF_TESTED_OK,'_0fj3grUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m3,init_CS_LL_CF_TESTED_KO,'_0fj3g7UlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_false(none)]),becomes_element_of(rodinpos(m3,init_HDMachine_CFTestedOK,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none))],[]),event(rodinpos(m3,'User_PressesOn','_bPvj4LSHEeW1p-Q_lMMcSC'),'User_PressesOn',ordinary(none),['User_PressesOn'],[],[equal(rodinpos(m3,isin_STANDBY,'_JjCZ8bR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m3,'CS_TopLevel_guards1','_0cjm0LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m3,enter_PREPARATION,'_JjCZ8rR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'PREPARATION')]),assign(rodinpos(m3,enter_CF_TESTING,'_ttVsI7R9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CF_TESTING')])],[]),event(rodinpos(m3,'HDSystem_StartsConnectingPatient','_bPvj4LSHEeW1p-Q_lMMcSD'),'HDSystem_StartsConnectingPatient',ordinary(none),['HDSystem_StartsConnectingPatient'],[],[equal(rodinpos(m3,isin_PREPARATION,'_JjCZ87R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION')),equal(rodinpos(m3,isin_DIALYZER_RINSING,'_ttVsJLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'DIALYZER_RINSING'))],[],[assign(rodinpos(m3,enter_INITIATION,'_JjDBALR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'INITIATION')]),assign(rodinpos(m3,leave_PREPARATION_sm,'_ttVsJbR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m3,enter_PATIENT_CONNECTING,'_ttVsJrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'PATIENT_CONNECTING')])],[]),event(rodinpos(m3,'HDSystem_StartsReinfusion','_bPvj4LSHEeW1p-Q_lMMcSE'),'HDSystem_StartsReinfusion',ordinary(none),['HDSystem_StartsReinfusion'],[],[equal(rodinpos(m3,isin_INITIATION,'_JjDBAbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'INITIATION')),equal(rodinpos(m3,isin_THERAPY,'_ttWTMLR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'THERAPY'))],[],[assign(rodinpos(m3,enter_ENDING,'_JjDBArR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'ENDING')]),assign(rodinpos(m3,leave_INITIATION_sm,'_ttWTMbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m3,enter_REINFUSION,'_ttWTMrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'REINFUSION')])],[]),event(rodinpos(m3,'User_PressesOff','_bPvj4LSHEeW1p-Q_lMMcSF'),'User_PressesOff',ordinary(none),['User_PressesOff'],[],[equal(rodinpos(m3,isin_ENDING,'_JjDBA7R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'ENDING')),equal(rodinpos(m3,isin_THERAPY_OVERVIEWING,'_ttWTM7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'THERAPY_OVERVIEWING'))],[],[assign(rodinpos(m3,enter_STANDBY,'_JjDoELR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m3,leave_ENDING_sm,'_ttWTNLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')])],[]),event(rodinpos(m3,'CS_TopLevel_StartsConnectingConcentrate','_bPvj4LSHEeW1p-Q_lMMcSG'),'CS_TopLevel_StartsConnectingConcentrate',ordinary(none),['HDSystem_StartsConnectingConcentrate'],[],[equal(rodinpos(m3,isin_CF_TESTING,'_ttW6QLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m3,'PREPARATION_sm_guards1','_0cjm0bUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m3,enter_CONCENTRATE_CONNECTING,'_ttXhULR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CONCENTRATE_CONNECTING')])],[]),event(rodinpos(m3,'HDSystem_StartsSettingRP','_bPvj4LSHEeW1p-Q_lMMcSH'),'HDSystem_StartsSettingRP',ordinary(none),['HDSystem_StartsSettingRP'],[],[equal(rodinpos(m3,isin_CONCENTRATE_CONNECTING,'_ttXhUbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CONCENTRATE_CONNECTING'))],[],[assign(rodinpos(m3,enter_RP_SETTING,'_ttXhUrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'RP_SETTING')])],[]),event(rodinpos(m3,'HDSystem_StartsPreparingTS','_bPvj4LSHEeW1p-Q_lMMcSI'),'HDSystem_StartsPreparingTS',ordinary(none),['HDSystem_StartsPreparingTS'],[],[equal(rodinpos(m3,isin_RP_SETTING,'_ttXhU7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'RP_SETTING'))],[],[assign(rodinpos(m3,enter_TS_PREPARING,'_ttXhVLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TS_PREPARING')])],[]),event(rodinpos(m3,'HDSystem_StartsPreparingHP','_bPvj4LSHEeW1p-Q_lMMcSJ'),'HDSystem_StartsPreparingHP',ordinary(none),['HDSystem_StartsPreparingHP'],[],[equal(rodinpos(m3,isin_TS_PREPARING,'_ttXhVbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TS_PREPARING'))],[],[assign(rodinpos(m3,enter_HP_PREPARING,'_ttYIYLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'HP_PREPARING')])],[]),event(rodinpos(m3,'HDSystem_StartsSettingTP','_bPvj4LSHEeW1p-Q_lMMcSK'),'HDSystem_StartsSettingTP',ordinary(none),['HDSystem_StartsSettingTP'],[],[equal(rodinpos(m3,isin_HP_PREPARING,'_ttYIYbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'HP_PREPARING'))],[],[assign(rodinpos(m3,enter_TP_SETTING,'_ttYIYrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TP_SETTING')])],[]),event(rodinpos(m3,'HDSystem_StartsRinsingDialyzer','_bPvj4LSHEeW1p-Q_lMMcSL'),'HDSystem_StartsRinsingDialyzer',ordinary(none),['HDSystem_StartsRinsingDialyzer'],[],[equal(rodinpos(m3,isin_TP_SETTING,'_ttYIY7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TP_SETTING'))],[],[assign(rodinpos(m3,enter_DIALYZER_RINSING,'_ttYIZLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'DIALYZER_RINSING')])],[]),event(rodinpos(m3,'HDSystem_StartsTherapy','_bPvj4LSHEeW1p-Q_lMMcSM'),'HDSystem_StartsTherapy',ordinary(none),['HDSystem_StartsTherapy'],[],[equal(rodinpos(m3,isin_PATIENT_CONNECTING,'_ttYIZbR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'PATIENT_CONNECTING'))],[],[assign(rodinpos(m3,enter_THERAPY,'_ttYIZrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'THERAPY')])],[]),event(rodinpos(m3,'HDSystem_StartsEmptyingDialyzer','_bPvj4LSHEeW1p-Q_lMMcSN'),'HDSystem_StartsEmptyingDialyzer',ordinary(none),['HDSystem_StartsEmptyingDialyzer'],[],[equal(rodinpos(m3,isin_REINFUSION,'_ttYvcLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'REINFUSION'))],[],[assign(rodinpos(m3,enter_DIALYZER_EMPTYING,'_ttYvcbR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'DIALYZER_EMPTYING')])],[]),event(rodinpos(m3,'HDSystem_StartsEmptyingCartridge','_bPvj4LSHEeW1p-Q_lMMcSO'),'HDSystem_StartsEmptyingCartridge',ordinary(none),['HDSystem_StartsEmptyingCartridge'],[],[equal(rodinpos(m3,isin_DIALYZER_EMPTYING,'_ttYvcrR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'DIALYZER_EMPTYING'))],[],[assign(rodinpos(m3,enter_CARTRIDGE_EMPTYING,'_ttYvc7R9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'CARTRIDGE_EMPTYING')])],[]),event(rodinpos(m3,'HDSystem_StartsOverviewingTherapy','_bPvj4LSHEeW1p-Q_lMMcSP'),'HDSystem_StartsOverviewingTherapy',ordinary(none),['HDSystem_StartsOverviewingTherapy'],[],[equal(rodinpos(m3,isin_CARTRIDGE_EMPTYING,'_ttYvdLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'CARTRIDGE_EMPTYING'))],[],[assign(rodinpos(m3,enter_THERAPY_OVERVIEWING,'_ttZWgLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'THERAPY_OVERVIEWING')])],[]),event(rodinpos(m3,'CS_LowLevel_StartsTestingCF','_bPvj4LSHEeW1p-Q_lMMcSQ'),'CS_LowLevel_StartsTestingCF',ordinary(none),['CS_LowLevel_StartsTestingCF'],[],[equal(rodinpos(m3,'CS_LowLevel_CFTesting_guards1','_0fmTwLUlEeWNr7Z28XyZAQ'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m3,isin_CS_LL_CF_NOT_TESTED,'_0fmTwbUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m3,leave_CS_LL_CF_NOT_TESTED,'_0fm60LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_false(none)]),assign(rodinpos(m3,enter_CS_LL_CF_TESTING,'_0fm60bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_true(none)])],[]),event(rodinpos(m3,'CS_LowLevel_StandsBy','_bPvj4LSHEeW1p-Q_lMMcSR'),'CS_LowLevel_StandsBy',ordinary(none),['CS_LowLevel_StandsBy'],[],[equal(rodinpos(m3,'CS_LowLevel_CFTesting_guards2','_0fm60rUlEeWNr7Z28XyZAQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m3,isin_CS_LL_CF_TESTED_OK,'_0fm607UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m3,leave_CS_LL_CF_TESTED_OK,'_0fm61LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m3,enter_CS_LL_CF_NOT_TESTED,'_0fm61bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)])],[]),event(rodinpos(m3,'CS_LowLevel_CFTestsOK','_bPvj4LSHEeW1p-Q_lMMcSS'),'CS_LowLevel_CFTestsOK',ordinary(none),['CS_LowLevel_CFTestsOK'],[],[equal(rodinpos(m3,isin_CS_LL_CF_TESTING,'_0fnh4LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m3,'CS_LowLevel_CFTesting_guards3','_P7bT8LVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_true(none))],[],[assign(rodinpos(m3,leave_CS_LL_CF_TESTING,'_0fnh4bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m3,enter_CS_LL_CF_TESTED_OK,'_0fnh4rUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_true(none)])],[]),event(rodinpos(m3,'CS_LowLevel_CFTestsKO','_bPvj4LSHEeW1p-Q_lMMcST'),'CS_LowLevel_CFTestsKO',ordinary(none),['CS_LowLevel_CFTestsKO'],[],[equal(rodinpos(m3,isin_CS_LL_CF_TESTING,'_0fnh47UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none)),equal(rodinpos(m3,'CS_LowLevel_CFTesting_guards4','_P7bT8bVsEeWZYZ7CLrnHEQ'),identifier(none,'HDMachine_CFTestedOK'),boolean_false(none))],[],[assign(rodinpos(m3,leave_CS_LL_CF_TESTING,'_0fnh5LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m3,enter_CS_LL_CF_TESTED_KO,'_0fnh5bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_true(none)])],[]),event(rodinpos(m3,'HDMachine_CFTests','_buRZULSPEeW1p-Q_lMMcSD'),'HDMachine_CFTests',ordinary(none),[],[],[equal(rodinpos(m3,grd1,'('),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none))],[],[becomes_element_of(rodinpos(m3,act1,'\''),[identifier(none,'HDMachine_CFTestedOK')],bool_set(none))],[])])]),event_b_model(none,m2,[sees(none,[m0_implicitContext,m1_implicitContext,m2_implicitContext]),refines(none,m1),variables(none,[identifier(none,'CS_LL_CF_TESTED_KO'),identifier(none,'CS_TopLevel'),identifier(none,'CS_LL_CF_TESTED_OK'),identifier(none,'CS_LL_CF_NOT_TESTED'),identifier(none,'CS_LL_CF_TESTING'),identifier(none,'INITIATION_sm'),identifier(none,'ENDING_sm'),identifier(none,'PREPARATION_sm')]),invariant(none,[member(rodinpos(m2,typeof_CS_LL_CF_NOT_TESTED,'_0foI8LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),bool_set(none)),member(rodinpos(m2,typeof_CS_LL_CF_TESTING,'_0foI8bUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),bool_set(none)),member(rodinpos(m2,typeof_CS_LL_CF_TESTED_OK,'_0foI8rUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),bool_set(none)),member(rodinpos(m2,typeof_CS_LL_CF_TESTED_KO,'_0foI87UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_KO'),bool_set(none)),partition(rodinpos(m2,distinct_states_in_CS_LowLevel_CFTesting,'_0foI9LUlEeWNr7Z28XyZAQ'),set_extension(none,[boolean_true(none)]),[intersection(none,set_extension(none,[identifier(none,'CS_LL_CF_NOT_TESTED')]),set_extension(none,[boolean_true(none)])),intersection(none,set_extension(none,[identifier(none,'CS_LL_CF_TESTING')]),set_extension(none,[boolean_true(none)])),intersection(none,set_extension(none,[identifier(none,'CS_LL_CF_TESTED_OK')]),set_extension(none,[boolean_true(none)])),intersection(none,set_extension(none,[identifier(none,'CS_LL_CF_TESTED_KO')]),set_extension(none,[boolean_true(none)]))]),implication(rodinpos(m2,'CS_TopLevel_invariants1','_0cn4QbUlEeWNr7Z28XyZAQ'),equal(none,identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION')),implication(none,not_equal(none,identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(none,identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none)))),implication(rodinpos(m2,'CS_TopLevel_invariants2','_0cn4QrUlEeWNr7Z28XyZAQ'),equal(none,identifier(none,'CS_TopLevel'),identifier(none,'INITIATION')),equal(none,identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))),implication(rodinpos(m2,'CS_TopLevel_invariants3','_0cn4Q7UlEeWNr7Z28XyZAQ'),equal(none,identifier(none,'CS_TopLevel'),identifier(none,'ENDING')),equal(none,identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none)))]),theorems(none,[]),events(none,[event(rodinpos(m2,'INITIALISATION','_ttZWhLR9EeW1p-Q_lMMcSB'),'INITIALISATION',ordinary(none),['INITIALISATION'],[],[],[],[assign(rodinpos(m2,init_CS_TopLevel,'_JjCZ8LR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m2,init_PREPARATION_sm,'_ttVsILR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m2,init_INITIATION_sm,'_ttVsIbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m2,init_ENDING_sm,'_ttVsIrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')]),assign(rodinpos(m2,init_CS_LL_CF_NOT_TESTED,'_0fj3gLUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)]),assign(rodinpos(m2,init_CS_LL_CF_TESTING,'_0fj3gbUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m2,init_CS_LL_CF_TESTED_OK,'_0fj3grUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m2,init_CS_LL_CF_TESTED_KO,'_0fj3g7UlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_false(none)])],[]),event(rodinpos(m2,'User_PressesOn','_ttZWhLR9EeW1p-Q_lMMcSC'),'User_PressesOn',ordinary(none),['HDSystem_StartsTestingCF'],[],[equal(rodinpos(m2,isin_STANDBY,'_JjCZ8bR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m2,'CS_TopLevel_guards1','_0cjm0LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m2,enter_PREPARATION,'_JjCZ8rR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'PREPARATION')]),assign(rodinpos(m2,enter_CF_TESTING,'_ttVsI7R9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CF_TESTING')])],[]),event(rodinpos(m2,'HDSystem_StartsConnectingPatient','_ttZWhLR9EeW1p-Q_lMMcSD'),'HDSystem_StartsConnectingPatient',ordinary(none),['HDSystem_StartsConnectingPatient'],[],[equal(rodinpos(m2,isin_PREPARATION,'_JjCZ87R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION')),equal(rodinpos(m2,isin_DIALYZER_RINSING,'_ttVsJLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'DIALYZER_RINSING'))],[],[assign(rodinpos(m2,enter_INITIATION,'_JjDBALR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'INITIATION')]),assign(rodinpos(m2,leave_PREPARATION_sm,'_ttVsJbR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m2,enter_PATIENT_CONNECTING,'_ttVsJrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'PATIENT_CONNECTING')])],[]),event(rodinpos(m2,'HDSystem_StartsReinfusion','_ttZWhLR9EeW1p-Q_lMMcSE'),'HDSystem_StartsReinfusion',ordinary(none),['HDSystem_StartsReinfusion'],[],[equal(rodinpos(m2,isin_INITIATION,'_JjDBAbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'INITIATION')),equal(rodinpos(m2,isin_THERAPY,'_ttWTMLR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'THERAPY'))],[],[assign(rodinpos(m2,enter_ENDING,'_JjDBArR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'ENDING')]),assign(rodinpos(m2,leave_INITIATION_sm,'_ttWTMbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m2,enter_REINFUSION,'_ttWTMrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'REINFUSION')])],[]),event(rodinpos(m2,'User_PressesOff','_ttZWhLR9EeW1p-Q_lMMcSF'),'User_PressesOff',ordinary(none),['HDSystem_StartsStandingBy'],[],[equal(rodinpos(m2,isin_ENDING,'_JjDBA7R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'ENDING')),equal(rodinpos(m2,isin_THERAPY_OVERVIEWING,'_ttWTM7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'THERAPY_OVERVIEWING'))],[],[assign(rodinpos(m2,enter_STANDBY,'_JjDoELR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m2,leave_ENDING_sm,'_ttWTNLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')])],[]),event(rodinpos(m2,'HDSystem_StartsConnectingConcentrate','_ttZWhLR9EeW1p-Q_lMMcSG'),'HDSystem_StartsConnectingConcentrate',ordinary(none),['HDSystem_StartsConnectingConcentrate'],[],[equal(rodinpos(m2,isin_CF_TESTING,'_ttW6QLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m2,'PREPARATION_sm_guards1','_0cjm0bUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m2,enter_CONCENTRATE_CONNECTING,'_ttXhULR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CONCENTRATE_CONNECTING')])],[]),event(rodinpos(m2,'HDSystem_StartsSettingRP','_ttZWhLR9EeW1p-Q_lMMcSH'),'HDSystem_StartsSettingRP',ordinary(none),['HDSystem_StartsSettingRP'],[],[equal(rodinpos(m2,isin_CONCENTRATE_CONNECTING,'_ttXhUbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CONCENTRATE_CONNECTING'))],[],[assign(rodinpos(m2,enter_RP_SETTING,'_ttXhUrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'RP_SETTING')])],[]),event(rodinpos(m2,'HDSystem_StartsPreparingTS','_ttZWhLR9EeW1p-Q_lMMcSI'),'HDSystem_StartsPreparingTS',ordinary(none),['HDSystem_StartsPreparingTS'],[],[equal(rodinpos(m2,isin_RP_SETTING,'_ttXhU7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'RP_SETTING'))],[],[assign(rodinpos(m2,enter_TS_PREPARING,'_ttXhVLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TS_PREPARING')])],[]),event(rodinpos(m2,'HDSystem_StartsPreparingHP','_ttZWhLR9EeW1p-Q_lMMcSJ'),'HDSystem_StartsPreparingHP',ordinary(none),['HDSystem_StartsPreparingHP'],[],[equal(rodinpos(m2,isin_TS_PREPARING,'_ttXhVbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TS_PREPARING'))],[],[assign(rodinpos(m2,enter_HP_PREPARING,'_ttYIYLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'HP_PREPARING')])],[]),event(rodinpos(m2,'HDSystem_StartsSettingTP','_ttZWhLR9EeW1p-Q_lMMcSK'),'HDSystem_StartsSettingTP',ordinary(none),['HDSystem_StartsSettingTP'],[],[equal(rodinpos(m2,isin_HP_PREPARING,'_ttYIYbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'HP_PREPARING'))],[],[assign(rodinpos(m2,enter_TP_SETTING,'_ttYIYrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TP_SETTING')])],[]),event(rodinpos(m2,'HDSystem_StartsRinsingDialyzer','_ttZWhLR9EeW1p-Q_lMMcSL'),'HDSystem_StartsRinsingDialyzer',ordinary(none),['HDSystem_StartsRinsingDialyzer'],[],[equal(rodinpos(m2,isin_TP_SETTING,'_ttYIY7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TP_SETTING'))],[],[assign(rodinpos(m2,enter_DIALYZER_RINSING,'_ttYIZLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'DIALYZER_RINSING')])],[]),event(rodinpos(m2,'HDSystem_StartsTherapy','_ttZWhLR9EeW1p-Q_lMMcSM'),'HDSystem_StartsTherapy',ordinary(none),['HDSystem_StartsTherapy'],[],[equal(rodinpos(m2,isin_PATIENT_CONNECTING,'_ttYIZbR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'PATIENT_CONNECTING'))],[],[assign(rodinpos(m2,enter_THERAPY,'_ttYIZrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'THERAPY')])],[]),event(rodinpos(m2,'HDSystem_StartsEmptyingDialyzer','_ttZWhLR9EeW1p-Q_lMMcSN'),'HDSystem_StartsEmptyingDialyzer',ordinary(none),['HDSystem_StartsEmptyingDialyzer'],[],[equal(rodinpos(m2,isin_REINFUSION,'_ttYvcLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'REINFUSION'))],[],[assign(rodinpos(m2,enter_DIALYZER_EMPTYING,'_ttYvcbR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'DIALYZER_EMPTYING')])],[]),event(rodinpos(m2,'HDSystem_StartsEmptyingCartridge','_ttZWhLR9EeW1p-Q_lMMcSO'),'HDSystem_StartsEmptyingCartridge',ordinary(none),['HDSystem_StartsEmptyingCartridge'],[],[equal(rodinpos(m2,isin_DIALYZER_EMPTYING,'_ttYvcrR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'DIALYZER_EMPTYING'))],[],[assign(rodinpos(m2,enter_CARTRIDGE_EMPTYING,'_ttYvc7R9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'CARTRIDGE_EMPTYING')])],[]),event(rodinpos(m2,'HDSystem_StartsOverviewingTherapy','_ttZWhLR9EeW1p-Q_lMMcSP'),'HDSystem_StartsOverviewingTherapy',ordinary(none),['HDSystem_StartsOverviewingTherapy'],[],[equal(rodinpos(m2,isin_CARTRIDGE_EMPTYING,'_ttYvdLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'CARTRIDGE_EMPTYING'))],[],[assign(rodinpos(m2,enter_THERAPY_OVERVIEWING,'_ttZWgLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'THERAPY_OVERVIEWING')])],[]),event(rodinpos(m2,'CS_LowLevel_StartsTestingCF','_91cCALSGEeW1p-Q_lMMcSA'),'CS_LowLevel_StartsTestingCF',ordinary(none),[],[],[equal(rodinpos(m2,'CS_LowLevel_CFTesting_guards1','_0fmTwLUlEeWNr7Z28XyZAQ'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING')),equal(rodinpos(m2,isin_CS_LL_CF_NOT_TESTED,'_0fmTwbUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_NOT_TESTED'),boolean_true(none))],[],[assign(rodinpos(m2,leave_CS_LL_CF_NOT_TESTED,'_0fm60LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_false(none)]),assign(rodinpos(m2,enter_CS_LL_CF_TESTING,'_0fm60bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_true(none)])],[]),event(rodinpos(m2,'CS_LowLevel_StandsBy','_91cCAbSGEeW1p-Q_lMMcSA'),'CS_LowLevel_StandsBy',ordinary(none),[],[],[equal(rodinpos(m2,'CS_LowLevel_CFTesting_guards2','_0fm60rUlEeWNr7Z28XyZAQ'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY')),equal(rodinpos(m2,isin_CS_LL_CF_TESTED_OK,'_0fm607UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTED_OK'),boolean_true(none))],[],[assign(rodinpos(m2,leave_CS_LL_CF_TESTED_OK,'_0fm61LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_false(none)]),assign(rodinpos(m2,enter_CS_LL_CF_NOT_TESTED,'_0fm61bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_NOT_TESTED')],[boolean_true(none)])],[]),event(rodinpos(m2,'CS_LowLevel_CFTestsOK','_91cCArSGEeW1p-Q_lMMcSA'),'CS_LowLevel_CFTestsOK',ordinary(none),[],[],[equal(rodinpos(m2,isin_CS_LL_CF_TESTING,'_0fnh4LUlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none))],[],[assign(rodinpos(m2,leave_CS_LL_CF_TESTING,'_0fnh4bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m2,enter_CS_LL_CF_TESTED_OK,'_0fnh4rUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_OK')],[boolean_true(none)])],[]),event(rodinpos(m2,'CS_LowLevel_CFTestsKO','_91cCA7SGEeW1p-Q_lMMcSA'),'CS_LowLevel_CFTestsKO',ordinary(none),[],[],[equal(rodinpos(m2,isin_CS_LL_CF_TESTING,'_0fnh47UlEeWNr7Z28XyZAQ'),identifier(none,'CS_LL_CF_TESTING'),boolean_true(none))],[],[assign(rodinpos(m2,leave_CS_LL_CF_TESTING,'_0fnh5LUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTING')],[boolean_false(none)]),assign(rodinpos(m2,enter_CS_LL_CF_TESTED_KO,'_0fnh5bUlEeWNr7Z28XyZAQ'),[identifier(none,'CS_LL_CF_TESTED_KO')],[boolean_true(none)])],[])])]),event_b_model(none,m1,[sees(none,[m0_implicitContext,m1_implicitContext]),refines(none,m0),variables(none,[identifier(none,'CS_TopLevel'),identifier(none,'INITIATION_sm'),identifier(none,'ENDING_sm'),identifier(none,'PREPARATION_sm')]),invariant(none,[member(rodinpos(m1,typeof_PREPARATION_sm,'_ttZWhbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1,typeof_INITIATION_sm,'_ttZWhrR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'INITIATION_sm_STATES')),member(rodinpos(m1,typeof_ENDING_sm,'_ttZWh7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'ENDING_sm_STATES')),equivalence(rodinpos(m1,superstateof_PREPARATION_sm,'_ttZWiLR9EeW1p-Q_lMMcSA'),not_equal(none,identifier(none,'PREPARATION_sm'),identifier(none,'PREPARATION_sm_NULL')),equal(none,identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION'))),equivalence(rodinpos(m1,superstateof_INITIATION_sm,'_ttZ9kLR9EeW1p-Q_lMMcSA'),not_equal(none,identifier(none,'INITIATION_sm'),identifier(none,'INITIATION_sm_NULL')),equal(none,identifier(none,'CS_TopLevel'),identifier(none,'INITIATION'))),equivalence(rodinpos(m1,superstateof_ENDING_sm,'_ttZ9kbR9EeW1p-Q_lMMcSA'),not_equal(none,identifier(none,'ENDING_sm'),identifier(none,'ENDING_sm_NULL')),equal(none,identifier(none,'CS_TopLevel'),identifier(none,'ENDING')))]),theorems(none,[]),events(none,[event(rodinpos(m1,'INITIALISATION','_egXkoKJTEeWzIMhBFfqG3R'),'INITIALISATION',ordinary(none),['INITIALISATION'],[],[],[],[assign(rodinpos(m1,init_CS_TopLevel,'_JjCZ8LR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m1,init_PREPARATION_sm,'_ttVsILR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m1,init_INITIATION_sm,'_ttVsIbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m1,init_ENDING_sm,'_ttVsIrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')])],[]),event(rodinpos(m1,'HDSystem_StartsTestingCF','_egXkoKJTEeWzIMhBFfqG3S'),'HDSystem_StartsTestingCF',ordinary(none),['HDSystem_Prepares'],[],[equal(rodinpos(m1,isin_STANDBY,'_JjCZ8bR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY'))],[],[assign(rodinpos(m1,enter_PREPARATION,'_JjCZ8rR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'PREPARATION')]),assign(rodinpos(m1,enter_CF_TESTING,'_ttVsI7R9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CF_TESTING')])],[]),event(rodinpos(m1,'HDSystem_StartsConnectingPatient','_egXkoKJTEeWzIMhBFfqG3T'),'HDSystem_StartsConnectingPatient',ordinary(none),['HDSystem_Initiates'],[],[equal(rodinpos(m1,isin_PREPARATION,'_JjCZ87R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION')),equal(rodinpos(m1,isin_DIALYZER_RINSING,'_ttVsJLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'DIALYZER_RINSING'))],[],[assign(rodinpos(m1,enter_INITIATION,'_JjDBALR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'INITIATION')]),assign(rodinpos(m1,leave_PREPARATION_sm,'_ttVsJbR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'PREPARATION_sm_NULL')]),assign(rodinpos(m1,enter_PATIENT_CONNECTING,'_ttVsJrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'PATIENT_CONNECTING')])],[]),event(rodinpos(m1,'HDSystem_StartsReinfusion','_egXkoKJTEeWzIMhBFfqG3U'),'HDSystem_StartsReinfusion',ordinary(none),['HDSystem_Ends'],[],[equal(rodinpos(m1,isin_INITIATION,'_JjDBAbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'INITIATION')),equal(rodinpos(m1,isin_THERAPY,'_ttWTMLR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'THERAPY'))],[],[assign(rodinpos(m1,enter_ENDING,'_JjDBArR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'ENDING')]),assign(rodinpos(m1,leave_INITIATION_sm,'_ttWTMbR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'INITIATION_sm_NULL')]),assign(rodinpos(m1,enter_REINFUSION,'_ttWTMrR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'REINFUSION')])],[]),event(rodinpos(m1,'HDSystem_StartsStandingBy','_egXkoKJTEeWzIMhBFfqG3V'),'HDSystem_StartsStandingBy',ordinary(none),['HDSystem_StandsBy'],[],[equal(rodinpos(m1,isin_ENDING,'_JjDBA7R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'ENDING')),equal(rodinpos(m1,isin_THERAPY_OVERVIEWING,'_ttWTM7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'THERAPY_OVERVIEWING'))],[],[assign(rodinpos(m1,enter_STANDBY,'_JjDoELR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')]),assign(rodinpos(m1,leave_ENDING_sm,'_ttWTNLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'ENDING_sm_NULL')])],[]),event(rodinpos(m1,'HDSystem_StartsConnectingConcentrate','_JHqEILQ6EeW1p-Q_lMMcSA'),'HDSystem_StartsConnectingConcentrate',ordinary(none),[],[],[equal(rodinpos(m1,isin_CF_TESTING,'_ttW6QLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CF_TESTING'))],[],[assign(rodinpos(m1,enter_CONCENTRATE_CONNECTING,'_ttXhULR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'CONCENTRATE_CONNECTING')])],[]),event(rodinpos(m1,'HDSystem_StartsSettingRP','_XmAkELQ6EeW1p-Q_lMMcSA'),'HDSystem_StartsSettingRP',ordinary(none),[],[],[equal(rodinpos(m1,isin_CONCENTRATE_CONNECTING,'_ttXhUbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'CONCENTRATE_CONNECTING'))],[],[assign(rodinpos(m1,enter_RP_SETTING,'_ttXhUrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'RP_SETTING')])],[]),event(rodinpos(m1,'HDSystem_StartsPreparingTS','_hfJzcLQ6EeW1p-Q_lMMcSA'),'HDSystem_StartsPreparingTS',ordinary(none),[],[],[equal(rodinpos(m1,isin_RP_SETTING,'_ttXhU7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'RP_SETTING'))],[],[assign(rodinpos(m1,enter_TS_PREPARING,'_ttXhVLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TS_PREPARING')])],[]),event(rodinpos(m1,'HDSystem_StartsPreparingHP','_oYozwLQ6EeW1p-Q_lMMcSA'),'HDSystem_StartsPreparingHP',ordinary(none),[],[],[equal(rodinpos(m1,isin_TS_PREPARING,'_ttXhVbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TS_PREPARING'))],[],[assign(rodinpos(m1,enter_HP_PREPARING,'_ttYIYLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'HP_PREPARING')])],[]),event(rodinpos(m1,'HDSystem_StartsSettingTP','_xp4T0LR1EeW1p-Q_lMMcSA'),'HDSystem_StartsSettingTP',ordinary(none),[],[],[equal(rodinpos(m1,isin_HP_PREPARING,'_ttYIYbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'HP_PREPARING'))],[],[assign(rodinpos(m1,enter_TP_SETTING,'_ttYIYrR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'TP_SETTING')])],[]),event(rodinpos(m1,'HDSystem_StartsRinsingDialyzer','_BRMm8LR2EeW1p-Q_lMMcSA'),'HDSystem_StartsRinsingDialyzer',ordinary(none),[],[],[equal(rodinpos(m1,isin_TP_SETTING,'_ttYIY7R9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm'),identifier(none,'TP_SETTING'))],[],[assign(rodinpos(m1,enter_DIALYZER_RINSING,'_ttYIZLR9EeW1p-Q_lMMcSA'),[identifier(none,'PREPARATION_sm')],[identifier(none,'DIALYZER_RINSING')])],[]),event(rodinpos(m1,'HDSystem_StartsTherapy','_GW8G0LR4EeW1p-Q_lMMcSA'),'HDSystem_StartsTherapy',ordinary(none),[],[],[equal(rodinpos(m1,isin_PATIENT_CONNECTING,'_ttYIZbR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm'),identifier(none,'PATIENT_CONNECTING'))],[],[assign(rodinpos(m1,enter_THERAPY,'_ttYIZrR9EeW1p-Q_lMMcSA'),[identifier(none,'INITIATION_sm')],[identifier(none,'THERAPY')])],[]),event(rodinpos(m1,'HDSystem_StartsEmptyingDialyzer','_i1CfILR4EeW1p-Q_lMMcSA'),'HDSystem_StartsEmptyingDialyzer',ordinary(none),[],[],[equal(rodinpos(m1,isin_REINFUSION,'_ttYvcLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'REINFUSION'))],[],[assign(rodinpos(m1,enter_DIALYZER_EMPTYING,'_ttYvcbR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'DIALYZER_EMPTYING')])],[]),event(rodinpos(m1,'HDSystem_StartsEmptyingCartridge','_qVG-ULR4EeW1p-Q_lMMcSA'),'HDSystem_StartsEmptyingCartridge',ordinary(none),[],[],[equal(rodinpos(m1,isin_DIALYZER_EMPTYING,'_ttYvcrR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'DIALYZER_EMPTYING'))],[],[assign(rodinpos(m1,enter_CARTRIDGE_EMPTYING,'_ttYvc7R9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'CARTRIDGE_EMPTYING')])],[]),event(rodinpos(m1,'HDSystem_StartsOverviewingTherapy','_0fo4oLR4EeW1p-Q_lMMcSA'),'HDSystem_StartsOverviewingTherapy',ordinary(none),[],[],[equal(rodinpos(m1,isin_CARTRIDGE_EMPTYING,'_ttYvdLR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm'),identifier(none,'CARTRIDGE_EMPTYING'))],[],[assign(rodinpos(m1,enter_THERAPY_OVERVIEWING,'_ttZWgLR9EeW1p-Q_lMMcSA'),[identifier(none,'ENDING_sm')],[identifier(none,'THERAPY_OVERVIEWING')])],[])])]),event_b_model(none,m0,[sees(none,[m0_implicitContext]),variables(none,[identifier(none,'CS_TopLevel')]),invariant(none,[member(rodinpos(m0,typeof_CS_TopLevel,'_JjEPILR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'CS_TopLevel_STATES'))]),theorems(none,[]),events(none,[event(rodinpos(m0,'INITIALISATION','\''),'INITIALISATION',ordinary(none),[],[],[],[],[assign(rodinpos(m0,init_CS_TopLevel,'_JjCZ8LR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')])],[]),event(rodinpos(m0,'HDSystem_Prepares','_M2qGgKJUEeWzIMhBFfqG3Q'),'HDSystem_Prepares',ordinary(none),[],[],[equal(rodinpos(m0,isin_STANDBY,'_JjCZ8bR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'STANDBY'))],[],[assign(rodinpos(m0,enter_PREPARATION,'_JjCZ8rR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'PREPARATION')])],[]),event(rodinpos(m0,'HDSystem_Initiates','_M2qtkKJUEeWzIMhBFfqG3Q'),'HDSystem_Initiates',ordinary(none),[],[],[equal(rodinpos(m0,isin_PREPARATION,'_JjCZ87R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'PREPARATION'))],[],[assign(rodinpos(m0,enter_INITIATION,'_JjDBALR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'INITIATION')])],[]),event(rodinpos(m0,'HDSystem_Ends','_M2qtkaJUEeWzIMhBFfqG3Q'),'HDSystem_Ends',ordinary(none),[],[],[equal(rodinpos(m0,isin_INITIATION,'_JjDBAbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'INITIATION'))],[],[assign(rodinpos(m0,enter_ENDING,'_JjDBArR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'ENDING')])],[]),event(rodinpos(m0,'HDSystem_StandsBy','_OIxOoKJUEeWzIMhBFfqG3Q'),'HDSystem_StandsBy',ordinary(none),[],[],[equal(rodinpos(m0,isin_ENDING,'_JjDBA7R5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel'),identifier(none,'ENDING'))],[],[assign(rodinpos(m0,enter_STANDBY,'_JjDoELR5EeW1p-Q_lMMcSA'),[identifier(none,'CS_TopLevel')],[identifier(none,'STANDBY')])],[])])])],[event_b_context(none,m0_implicitContext,[extends(none,[]),constants(none,[identifier(none,'HDSystem_PREP'),identifier(none,'INITIATION'),identifier(none,'ENDING'),identifier(none,'HDSystem_END'),identifier(none,'PREPARATION'),identifier(none,'HDSystem_INIT'),identifier(none,'HDSystem_STANDBY'),identifier(none,'STANDBY')]),abstract_constants(none,[]),axioms(none,[member(rodinpos(m0_implicitContext,typeof_STANDBY,'_JjNZELR5EeW1p-Q_lMMcSA'),identifier(none,'STANDBY'),identifier(none,'CS_TopLevel_STATES')),member(rodinpos(m0_implicitContext,typeof_PREPARATION,'_JjNZEbR5EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION'),identifier(none,'CS_TopLevel_STATES')),member(rodinpos(m0_implicitContext,typeof_INITIATION,'_JjNZErR5EeW1p-Q_lMMcSA'),identifier(none,'INITIATION'),identifier(none,'CS_TopLevel_STATES')),member(rodinpos(m0_implicitContext,typeof_ENDING,'_JjOAILR5EeW1p-Q_lMMcSA'),identifier(none,'ENDING'),identifier(none,'CS_TopLevel_STATES')),partition(rodinpos(m0_implicitContext,distinct_states_in_CS_TopLevel_STATES,'_JjOAIbR5EeW1p-Q_lMMcSA'),identifier(none,'CS_TopLevel_STATES'),[set_extension(none,[identifier(none,'STANDBY')]),set_extension(none,[identifier(none,'PREPARATION')]),set_extension(none,[identifier(none,'INITIATION')]),set_extension(none,[identifier(none,'ENDING')])]),member(rodinpos(m0_implicitContext,typeof_HDSystem_STANDBY,'_637ds6PgEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_STANDBY'),identifier(none,'HDSystem_STATES')),member(rodinpos(m0_implicitContext,typeof_HDSystem_PREP,'_637dtKPgEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_PREP'),identifier(none,'HDSystem_STATES')),member(rodinpos(m0_implicitContext,typeof_HDSystem_INIT,'_638EwKPgEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_INIT'),identifier(none,'HDSystem_STATES')),member(rodinpos(m0_implicitContext,typeof_HDSystem_END,'_638EwaPgEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_END'),identifier(none,'HDSystem_STATES')),partition(rodinpos(m0_implicitContext,distinct_states_in_HDSystem_STATES,'_638EwqPgEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_STATES'),[set_extension(none,[identifier(none,'HDSystem_STANDBY')]),set_extension(none,[identifier(none,'HDSystem_PREP')]),set_extension(none,[identifier(none,'HDSystem_INIT')]),set_extension(none,[identifier(none,'HDSystem_END')])])]),theorems(none,[]),sets(none,[deferred_set(none,'CS_TopLevel_STATES'),deferred_set(none,'HDSystem_STATES')])]),event_b_context(none,m1_implicitContext,[extends(none,[m0_implicitContext]),constants(none,[identifier(none,'PREPARATION_sm_NULL'),identifier(none,'HDSystem_Testing'),identifier(none,'HDSystem_EmptyingDialyzer'),identifier(none,'ENDING_sm_NULL'),identifier(none,'HDSystem_EmptyingCartridge'),identifier(none,'HDSystem_DisplayingOverview'),identifier(none,'THERAPY'),identifier(none,'HDSystem_RinsingDialyzer'),identifier(none,'HDSystem_PreparingHP'),identifier(none,'HDSystem_Reinfusion'),identifier(none,'TS_PREPARING'),identifier(none,'HDSystem_ConnectingPatient'),identifier(none,'TP_SETTING'),identifier(none,'DIALYZER_EMPTYING'),identifier(none,'THERAPY_OVERVIEWING'),identifier(none,'CONCENTRATE_CONNECTING'),identifier(none,'HDSystem_SettingTreatmentParameters'),identifier(none,'INITIATION_sm_NULL'),identifier(none,'CARTRIDGE_EMPTYING'),identifier(none,'HDSystem_END_sm_NULL'),identifier(none,'HDSystem_ConnectingConcentrate'),identifier(none,'HDSystem_Therapy'),identifier(none,'CF_TESTING'),identifier(none,'HDSystem_INIT_sm_NULL'),identifier(none,'PATIENT_CONNECTING'),identifier(none,'HDSystem_PreparingTubingSystem'),identifier(none,'REINFUSION'),identifier(none,'HP_PREPARING'),identifier(none,'HDSystem_PREP_sm_NULL'),identifier(none,'DIALYZER_RINSING'),identifier(none,'RP_SETTING'),identifier(none,'HDSystem_SettingRinsingParameters')]),abstract_constants(none,[]),axioms(none,[member(rodinpos(m1_implicitContext,typeof_PREPARATION_sm_NULL,'_tth5YLR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm_NULL'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_INITIATION_sm_NULL,'_ttigcLR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm_NULL'),identifier(none,'INITIATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_ENDING_sm_NULL,'_ttigcbR9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm_NULL'),identifier(none,'ENDING_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_CF_TESTING,'_ttigcrR9EeW1p-Q_lMMcSA'),identifier(none,'CF_TESTING'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_CONCENTRATE_CONNECTING,'_ttigc7R9EeW1p-Q_lMMcSA'),identifier(none,'CONCENTRATE_CONNECTING'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_RP_SETTING,'_ttigdLR9EeW1p-Q_lMMcSA'),identifier(none,'RP_SETTING'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_TS_PREPARING,'_ttigdbR9EeW1p-Q_lMMcSA'),identifier(none,'TS_PREPARING'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HP_PREPARING,'_ttigdrR9EeW1p-Q_lMMcSA'),identifier(none,'HP_PREPARING'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_TP_SETTING,'_ttigd7R9EeW1p-Q_lMMcSA'),identifier(none,'TP_SETTING'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_DIALYZER_RINSING,'_ttjHgLR9EeW1p-Q_lMMcSA'),identifier(none,'DIALYZER_RINSING'),identifier(none,'PREPARATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_PATIENT_CONNECTING,'_ttjHgbR9EeW1p-Q_lMMcSA'),identifier(none,'PATIENT_CONNECTING'),identifier(none,'INITIATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_THERAPY,'_ttjHgrR9EeW1p-Q_lMMcSA'),identifier(none,'THERAPY'),identifier(none,'INITIATION_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_REINFUSION,'_ttjHg7R9EeW1p-Q_lMMcSA'),identifier(none,'REINFUSION'),identifier(none,'ENDING_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_DIALYZER_EMPTYING,'_ttjHhLR9EeW1p-Q_lMMcSA'),identifier(none,'DIALYZER_EMPTYING'),identifier(none,'ENDING_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_CARTRIDGE_EMPTYING,'_ttjHhbR9EeW1p-Q_lMMcSA'),identifier(none,'CARTRIDGE_EMPTYING'),identifier(none,'ENDING_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_THERAPY_OVERVIEWING,'_ttjukLR9EeW1p-Q_lMMcSA'),identifier(none,'THERAPY_OVERVIEWING'),identifier(none,'ENDING_sm_STATES')),partition(rodinpos(m1_implicitContext,distinct_states_in_PREPARATION_sm_STATES,'_ttjukbR9EeW1p-Q_lMMcSA'),identifier(none,'PREPARATION_sm_STATES'),[set_extension(none,[identifier(none,'CF_TESTING')]),set_extension(none,[identifier(none,'CONCENTRATE_CONNECTING')]),set_extension(none,[identifier(none,'RP_SETTING')]),set_extension(none,[identifier(none,'TS_PREPARING')]),set_extension(none,[identifier(none,'HP_PREPARING')]),set_extension(none,[identifier(none,'TP_SETTING')]),set_extension(none,[identifier(none,'DIALYZER_RINSING')]),set_extension(none,[identifier(none,'PREPARATION_sm_NULL')])]),partition(rodinpos(m1_implicitContext,distinct_states_in_INITIATION_sm_STATES,'_ttjukrR9EeW1p-Q_lMMcSA'),identifier(none,'INITIATION_sm_STATES'),[set_extension(none,[identifier(none,'PATIENT_CONNECTING')]),set_extension(none,[identifier(none,'THERAPY')]),set_extension(none,[identifier(none,'INITIATION_sm_NULL')])]),partition(rodinpos(m1_implicitContext,distinct_states_in_ENDING_sm_STATES,'_ttjuk7R9EeW1p-Q_lMMcSA'),identifier(none,'ENDING_sm_STATES'),[set_extension(none,[identifier(none,'REINFUSION')]),set_extension(none,[identifier(none,'DIALYZER_EMPTYING')]),set_extension(none,[identifier(none,'CARTRIDGE_EMPTYING')]),set_extension(none,[identifier(none,'THERAPY_OVERVIEWING')]),set_extension(none,[identifier(none,'ENDING_sm_NULL')])]),member(rodinpos(m1_implicitContext,typeof_HDSystem_PREP_sm_NULL,'_IYzzUqPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_PREP_sm_NULL'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_INIT_sm_NULL,'_IYzzU6PiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_INIT_sm_NULL'),identifier(none,'HDSystem_INIT_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_END_sm_NULL,'_IYzzVKPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_END_sm_NULL'),identifier(none,'HDSystem_END_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_Testing,'_IYzzVaPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_Testing'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_ConnectingConcentrate,'_IYzzVqPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_ConnectingConcentrate'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_SettingRinsingParameters,'_IYzzV6PiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_SettingRinsingParameters'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_PreparingTubingSystem,'_IYzzWKPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_PreparingTubingSystem'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_PreparingHP,'_IY0aYKPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_PreparingHP'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_SettingTreatmentParameters,'_IY0aYaPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_SettingTreatmentParameters'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_RinsingDialyzer,'_IY0aYqPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_RinsingDialyzer'),identifier(none,'HDSystem_PREP_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_ConnectingPatient,'_IY0aY6PiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_ConnectingPatient'),identifier(none,'HDSystem_INIT_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_Therapy,'_IY0aZKPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_Therapy'),identifier(none,'HDSystem_INIT_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_Reinfusion,'_IY0aZaPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_Reinfusion'),identifier(none,'HDSystem_END_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_EmptyingDialyzer,'_IY0aZqPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_EmptyingDialyzer'),identifier(none,'HDSystem_END_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_EmptyingCartridge,'_IY0aZ6PiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_EmptyingCartridge'),identifier(none,'HDSystem_END_sm_STATES')),member(rodinpos(m1_implicitContext,typeof_HDSystem_DisplayingOverview,'_IY1BcKPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_DisplayingOverview'),identifier(none,'HDSystem_END_sm_STATES')),partition(rodinpos(m1_implicitContext,distinct_states_in_HDSystem_PREP_sm_STATES,'_IY1BcaPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_PREP_sm_STATES'),[set_extension(none,[identifier(none,'HDSystem_Testing')]),set_extension(none,[identifier(none,'HDSystem_ConnectingConcentrate')]),set_extension(none,[identifier(none,'HDSystem_SettingRinsingParameters')]),set_extension(none,[identifier(none,'HDSystem_PreparingTubingSystem')]),set_extension(none,[identifier(none,'HDSystem_PreparingHP')]),set_extension(none,[identifier(none,'HDSystem_SettingTreatmentParameters')]),set_extension(none,[identifier(none,'HDSystem_RinsingDialyzer')]),set_extension(none,[identifier(none,'HDSystem_PREP_sm_NULL')])]),partition(rodinpos(m1_implicitContext,distinct_states_in_HDSystem_INIT_sm_STATES,'_IY1BcqPiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_INIT_sm_STATES'),[set_extension(none,[identifier(none,'HDSystem_ConnectingPatient')]),set_extension(none,[identifier(none,'HDSystem_Therapy')]),set_extension(none,[identifier(none,'HDSystem_INIT_sm_NULL')])]),partition(rodinpos(m1_implicitContext,distinct_states_in_HDSystem_END_sm_STATES,'_IY1Bc6PiEeWaQrtEc5Lq6g'),identifier(none,'HDSystem_END_sm_STATES'),[set_extension(none,[identifier(none,'HDSystem_Reinfusion')]),set_extension(none,[identifier(none,'HDSystem_EmptyingDialyzer')]),set_extension(none,[identifier(none,'HDSystem_EmptyingCartridge')]),set_extension(none,[identifier(none,'HDSystem_DisplayingOverview')]),set_extension(none,[identifier(none,'HDSystem_END_sm_NULL')])])]),theorems(none,[]),sets(none,[deferred_set(none,'HDSystem_PREP_sm_STATES'),deferred_set(none,'PREPARATION_sm_STATES'),deferred_set(none,'ENDING_sm_STATES'),deferred_set(none,'INITIATION_sm_STATES'),deferred_set(none,'HDSystem_END_sm_STATES'),deferred_set(none,'HDSystem_INIT_sm_STATES')])]),event_b_context(none,m2_implicitContext,[extends(none,[m1_implicitContext]),constants(none,[]),abstract_constants(none,[]),axioms(none,[]),theorems(none,[]),sets(none,[])]),event_b_context(none,m3_implicitContext,[extends(none,[m2_implicitContext]),constants(none,[]),abstract_constants(none,[]),axioms(none,[]),theorems(none,[]),sets(none,[])]),event_b_context(none,m4_implicitContext,[extends(none,[m3_implicitContext]),constants(none,[]),abstract_constants(none,[]),axioms(none,[]),theorems(none,[]),sets(none,[])]),event_b_context(none,m5_implicitContext,[extends(none,[m4_implicitContext]),constants(none,[]),abstract_constants(none,[]),axioms(none,[]),theorems(none,[]),sets(none,[])]),event_b_context(none,m6_implicitContext,[extends(none,[m5_implicitContext]),constants(none,[identifier(none,'CF_TESTING_sm_NULL'),identifier(none,'CF_TESTING_SIGNAL_RED'),identifier(none,'CF_TESTING_SIGNAL_OFF'),identifier(none,'CF_TESTING_SIGNAL_GREEN')]),abstract_constants(none,[]),axioms(none,[member(rodinpos(m6_implicitContext,typeof_CF_TESTING_sm_NULL,'_QblPpbkaEeW2TOhOfFhbNg'),identifier(none,'CF_TESTING_sm_NULL'),identifier(none,'CF_TESTING_sm_STATES')),member(rodinpos(m6_implicitContext,typeof_CF_TESTING_SIGNAL_OFF,'_QblPprkaEeW2TOhOfFhbNg'),identifier(none,'CF_TESTING_SIGNAL_OFF'),identifier(none,'CF_TESTING_sm_STATES')),member(rodinpos(m6_implicitContext,typeof_CF_TESTING_SIGNAL_GREEN,'_Qbl2sLkaEeW2TOhOfFhbNg'),identifier(none,'CF_TESTING_SIGNAL_GREEN'),identifier(none,'CF_TESTING_sm_STATES')),member(rodinpos(m6_implicitContext,typeof_CF_TESTING_SIGNAL_RED,'_Qbl2sbkaEeW2TOhOfFhbNg'),identifier(none,'CF_TESTING_SIGNAL_RED'),identifier(none,'CF_TESTING_sm_STATES')),partition(rodinpos(m6_implicitContext,distinct_states_in_CF_TESTING_sm_STATES,'_Qbl2srkaEeW2TOhOfFhbNg'),identifier(none,'CF_TESTING_sm_STATES'),[set_extension(none,[identifier(none,'CF_TESTING_SIGNAL_OFF')]),set_extension(none,[identifier(none,'CF_TESTING_SIGNAL_GREEN')]),set_extension(none,[identifier(none,'CF_TESTING_SIGNAL_RED')]),set_extension(none,[identifier(none,'CF_TESTING_sm_NULL')])])]),theorems(none,[]),sets(none,[deferred_set(none,'CF_TESTING_sm_STATES')])]),event_b_context(none,m7_implicitContext,[extends(none,[m6_implicitContext]),constants(none,[]),abstract_constants(none,[]),axioms(none,[]),theorems(none,[]),sets(none,[])]),event_b_context(none,m8_implicitContext,[extends(none,[m7_implicitContext]),constants(none,[]),abstract_constants(none,[]),axioms(none,[]),theorems(none,[]),sets(none,[])]),event_b_context(none,'c5-signals',[extends(none,[]),constants(none,[identifier(none,'SIGNAL_OFF'),identifier(none,'SIGNAL_GREEN'),identifier(none,'SIGNAL_RED'),identifier(none,'SIGNAL_ORANGE')]),abstract_constants(none,[]),axioms(none,[partition(rodinpos('c5-signals','SIGNAL_STATUS\21022\def','+'),identifier(none,'SIGNAL_STATUS'),[set_extension(none,[identifier(none,'SIGNAL_OFF')]),set_extension(none,[identifier(none,'SIGNAL_RED')]),set_extension(none,[identifier(none,'SIGNAL_GREEN')]),set_extension(none,[identifier(none,'SIGNAL_ORANGE')])])]),theorems(none,[]),sets(none,[deferred_set(none,'SIGNAL'),deferred_set(none,'SIGNAL_STATUS')])]),event_b_context(none,'c6-CFTestingSignal',[extends(none,['c5-signals']),constants(none,[identifier(none,'CF_TESTING_SIGNAL')]),abstract_constants(none,[]),axioms(none,[]),theorems(none,[member(rodinpos('c6-CFTestingSignal','CF_TESTING_SIGNAL-type',')'),identifier(none,'CF_TESTING_SIGNAL'),identifier(none,'SIGNAL'))]),sets(none,[])]),event_b_context(none,'c7-concentrates',[extends(none,[]),constants(none,[identifier(none,'CONCENTRATE_ACETATE'),identifier(none,'CONCENTRATE_NONE'),identifier(none,'CONCENTRATE_BICARBONATE')]),abstract_constants(none,[]),axioms(none,[partition(rodinpos('c7-concentrates',axm1,'+'),identifier(none,'CONCENTRATE'),[set_extension(none,[identifier(none,'CONCENTRATE_NONE')]),set_extension(none,[identifier(none,'CONCENTRATE_BICARBONATE')]),set_extension(none,[identifier(none,'CONCENTRATE_ACETATE')])])]),theorems(none,[]),sets(none,[deferred_set(none,'CONCENTRATE')])]),event_b_context(none,'c8-rinsing_parameters',[extends(none,[]),constants(none,[identifier(none,'BLOOD_FLOW_RANGE'),identifier(none,'UF_RINSING_VOLUME_RANGE'),identifier(none,'UF_RINSING_RATE_RANGE'),identifier(none,'RINSING_BP_RATE_RANGE'),identifier(none,'DF_FLOW_RANGE'),identifier(none,'RINSING_TIME_RANGE'),identifier(none,'FILLING_BP_RATE_RANGE'),identifier(none,'FILLING_BP_VOLUME_RANGE')]),abstract_constants(none,[]),axioms(none,[equal(rodinpos('c8-rinsing_parameters','FILLING_BP_RATE_RANGE_type','('),identifier(none,'FILLING_BP_RATE_RANGE'),interval(none,integer(none,50),integer(none,600))),equal(rodinpos('c8-rinsing_parameters','FILL_BP_VOLUME_RANGE_type','*'),identifier(none,'FILLING_BP_VOLUME_RANGE'),interval(none,integer(none,0),integer(none,6000))),equal(rodinpos('c8-rinsing_parameters','RINSING_BP_RATE_RANGE_type',','),identifier(none,'RINSING_BP_RATE_RANGE'),interval(none,integer(none,50),integer(none,300))),equal(rodinpos('c8-rinsing_parameters','DF_FLOW_RANGE_type','.'),identifier(none,'DF_FLOW_RANGE'),interval(none,integer(none,50),integer(none,300))),equal(rodinpos('c8-rinsing_parameters','RINSING_TIME_RANGE_type','0'),identifier(none,'RINSING_TIME_RANGE'),interval(none,integer(none,0),integer(none,59))),equal(rodinpos('c8-rinsing_parameters','UF_RINSING_RATE_RANGE_type','2'),identifier(none,'UF_RINSING_RATE_RANGE'),interval(none,integer(none,0),integer(none,3000))),equal(rodinpos('c8-rinsing_parameters','UF_RINSING_VOLUME_RANGE_type','4'),identifier(none,'UF_RINSING_VOLUME_RANGE'),interval(none,integer(none,0),integer(none,2950))),equal(rodinpos('c8-rinsing_parameters','BLOOD_FLOW_RANGE_type','6'),identifier(none,'BLOOD_FLOW_RANGE'),interval(none,integer(none,50),integer(none,600)))]),theorems(none,[not_equal(rodinpos('c8-rinsing_parameters','FILLING_BP_RATE_RANGE_non_empty','7'),identifier(none,'FILLING_BP_RATE_RANGE'),typeof(none,empty_set(none),pow_subset(none,integer_set(none)))),not_equal(rodinpos('c8-rinsing_parameters','FILL_BP_VOLUME_RANGE_non_empty',axm1),identifier(none,'FILLING_BP_VOLUME_RANGE'),typeof(none,empty_set(none),pow_subset(none,integer_set(none)))),not_equal(rodinpos('c8-rinsing_parameters','RINSING_BP_RATE_RANGE_non_empty',axm2),identifier(none,'RINSING_BP_RATE_RANGE'),typeof(none,empty_set(none),pow_subset(none,integer_set(none)))),not_equal(rodinpos('c8-rinsing_parameters','DF_FLOW_RANGE_non_empty',axm3),identifier(none,'DF_FLOW_RANGE'),typeof(none,empty_set(none),pow_subset(none,integer_set(none)))),not_equal(rodinpos('c8-rinsing_parameters','RINSING_TIME_RANGE_non_empty',axm4),identifier(none,'RINSING_TIME_RANGE'),typeof(none,empty_set(none),pow_subset(none,integer_set(none)))),not_equal(rodinpos('c8-rinsing_parameters','UF_RINSING_RATE_RANGE_non_empty',axm5),identifier(none,'UF_RINSING_RATE_RANGE'),typeof(none,empty_set(none),pow_subset(none,integer_set(none)))),not_equal(rodinpos('c8-rinsing_parameters','UF_RINSING_VOLUME_RANGE_non_empty',axm6),identifier(none,'UF_RINSING_VOLUME_RANGE'),typeof(none,empty_set(none),pow_subset(none,integer_set(none)))),not_equal(rodinpos('c8-rinsing_parameters','BLOOD_FLOW_RANGE_non_empty',axm7),identifier(none,'BLOOD_FLOW_RANGE'),typeof(none,empty_set(none),pow_subset(none,integer_set(none))))]),sets(none,[])])],[exporter_version(3),po('c8-rinsing_parameters','Theorem',[axiom('FILLING_BP_RATE_RANGE_non_empty')],true),po('c8-rinsing_parameters','Theorem',[axiom('FILL_BP_VOLUME_RANGE_non_empty')],true),po('c8-rinsing_parameters','Theorem',[axiom('RINSING_BP_RATE_RANGE_non_empty')],true),po('c8-rinsing_parameters','Theorem',[axiom('DF_FLOW_RANGE_non_empty')],true),po('c8-rinsing_parameters','Theorem',[axiom('RINSING_TIME_RANGE_non_empty')],true),po('c8-rinsing_parameters','Theorem',[axiom('UF_RINSING_RATE_RANGE_non_empty')],true),po('c8-rinsing_parameters','Theorem',[axiom('UF_RINSING_VOLUME_RANGE_non_empty')],true),po('c8-rinsing_parameters','Theorem',[axiom('BLOOD_FLOW_RANGE_non_empty')],true),po(m8,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(fillingBPRate_TYPE)],true),po(m8,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(fillingBPVolume_TYPE)],true),po(m8,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(rinsingBPRate_TYPE)],true),po(m8,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('DFFlow_TYPE')],true),po(m8,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('UFRinsingRate_TYPE')],true),po(m8,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('UFRinsingVolume_TYPE')],true),po(m8,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(bloodFlow_TYPE)],true),po(m8,'Feasibility of action',[action(init_fillingBPRate)],true),po(m8,'Feasibility of action',[action(init_fillingBPVolume)],true),po(m8,'Feasibility of action',[action(init_risingBPRate)],true),po(m8,'Feasibility of action',[action(init_DFFlow)],true),po(m8,'Feasibility of action',[action(init_UFRinsingRate)],true),po(m8,'Feasibility of action',[action(init_UFRinsingVolume)],true),po(m8,'Feasibility of action',[action(init_bloodFlow)],true),po(m8,'Invariant  preservation',[event('User_SetsRinsingParameters'),invariant(fillingBPRate_TYPE)],true),po(m8,'Invariant  preservation',[event('User_SetsRinsingParameters'),invariant(fillingBPVolume_TYPE)],true),po(m8,'Invariant  preservation',[event('User_SetsRinsingParameters'),invariant(rinsingBPRate_TYPE)],true),po(m8,'Invariant  preservation',[event('User_SetsRinsingParameters'),invariant('DFFlow_TYPE')],true),po(m8,'Invariant  preservation',[event('User_SetsRinsingParameters'),invariant('UFRinsingRate_TYPE')],true),po(m8,'Invariant  preservation',[event('User_SetsRinsingParameters'),invariant(bloodFlow_TYPE)],true),po(m8,'Feasibility of action',[action(act1)],true),po(m8,'Feasibility of action',[action(act2)],true),po(m8,'Feasibility of action',[action(act3)],true),po(m8,'Feasibility of action',[action(act4)],true),po(m8,'Feasibility of action',[action(act5)],true),po(m8,'Feasibility of action',[action(act6)],true),po(m7,'Feasibility of action',[action(act1)],true),po(m6,'Well-definedness of Invariant',[invariant('CF_TESTING_sm_invariants2')],true),po(m6,'Well-definedness of Invariant',[invariant('CF_TESTING_sm_invariants1')],true),po(m6,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(superstateof_CF_TESTING_sm)],true),po(m6,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('CF_TESTING_sm_invariants2')],true),po(m6,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('CF_TESTING_sm_invariants1')],true),po(m6,'Invariant  preservation',[event('User_PressesOn'),event('User_PressesOn'),invariant(superstateof_CF_TESTING_sm)],true),po(m6,'Invariant  preservation',[event('User_PressesOn'),event('User_PressesOn'),invariant('CF_TESTING_sm_invariants2')],true),po(m6,'Invariant  preservation',[event('User_PressesOn'),event('User_PressesOn'),invariant('CF_TESTING_sm_invariants1')],true),po(m6,'Invariant  preservation',[event('HDSystem_StartsConnectingPatient'),event('HDSystem_StartsConnectingPatient'),invariant(superstateof_CF_TESTING_sm)],true),po(m6,'Invariant  preservation',[event('HDSystem_StartsConnectingPatient'),event('HDSystem_StartsConnectingPatient'),invariant('CF_TESTING_sm_invariants2')],true),po(m6,'Invariant  preservation',[event('HDSystem_StartsConnectingPatient'),event('HDSystem_StartsConnectingPatient'),invariant('CF_TESTING_sm_invariants1')],true),po(m6,'Invariant  preservation',[event('User_PressesOff'),event('User_PressesOff'),invariant('CF_TESTING_sm_invariants2')],false),po(m6,'Invariant  preservation',[event('User_PressesOff'),event('User_PressesOff'),invariant('CF_TESTING_sm_invariants1')],false),po(m6,'Invariant  preservation',[event('CS_TopLevel_StartsConnectingConcentrate'),event('CS_TopLevel_StartsConnectingConcentrate'),invariant(superstateof_CF_TESTING_sm)],true),po(m6,'Invariant  preservation',[event('CS_TopLevel_StartsConnectingConcentrate'),event('CS_TopLevel_StartsConnectingConcentrate'),invariant('CF_TESTING_sm_invariants2')],true),po(m6,'Invariant  preservation',[event('CS_TopLevel_StartsConnectingConcentrate'),event('CS_TopLevel_StartsConnectingConcentrate'),invariant('CF_TESTING_sm_invariants1')],true),po(m6,'Invariant  preservation',[event('HDSystem_StartsSettingRP'),event('HDSystem_StartsSettingRP'),invariant(superstateof_CF_TESTING_sm)],true),po(m6,'Invariant  preservation',[event('HDSystem_StartsPreparingTS'),event('HDSystem_StartsPreparingTS'),invariant(superstateof_CF_TESTING_sm)],true),po(m6,'Invariant  preservation',[event('HDSystem_StartsPreparingHP'),event('HDSystem_StartsPreparingHP'),invariant(superstateof_CF_TESTING_sm)],true),po(m6,'Invariant  preservation',[event('HDSystem_StartsSettingTP'),event('HDSystem_StartsSettingTP'),invariant(superstateof_CF_TESTING_sm)],true),po(m6,'Invariant  preservation',[event('HDSystem_StartsRinsingDialyzer'),event('HDSystem_StartsRinsingDialyzer'),invariant(superstateof_CF_TESTING_sm)],true),po(m6,'Invariant  preservation',[event('CS_LowLevel_StandsBy'),event('CS_LowLevel_StandsBy'),invariant('CF_TESTING_sm_invariants2')],true),po(m6,'Invariant  preservation',[event('CS_LowLevel_StandsBy'),event('CS_LowLevel_StandsBy'),invariant('CF_TESTING_sm_invariants1')],true),po(m6,'Equality of common variables',[event('CS_LowLevel_StandsBy'),event('CS_LowLevel_StandsBy')],true),po(m6,'Invariant  preservation',[event('CS_TopLevel_SignalToGREEN'),event('CS_TopLevel_CFTestingSignal2Green'),invariant(superstateof_CF_TESTING_sm)],true),po(m6,'Invariant  preservation',[event('CS_TopLevel_SignalToGREEN'),event('CS_TopLevel_CFTestingSignal2Green'),invariant('CF_TESTING_sm_invariants2')],true),po(m6,'Invariant  preservation',[event('CS_TopLevel_SignalToGREEN'),event('CS_TopLevel_CFTestingSignal2Green'),invariant('CF_TESTING_sm_invariants1')],true),po(m6,'Invariant  preservation',[event('CS_TopLevel_SignalToRED'),event('CS_TopLevel_CFTestingSignal2Red'),invariant(superstateof_CF_TESTING_sm)],true),po(m6,'Invariant  preservation',[event('CS_TopLevel_SignalToRED'),event('CS_TopLevel_CFTestingSignal2Red'),invariant('CF_TESTING_sm_invariants2')],true),po(m6,'Invariant  preservation',[event('CS_TopLevel_SignalToRED'),event('CS_TopLevel_CFTestingSignal2Red'),invariant('CF_TESTING_sm_invariants1')],true),po(m6,'Invariant  preservation',[event('CS_TopLevel_SignalToGREEN'),event('CS_TopLevel_SignalToGREEN'),invariant('CF_TESTING_sm_invariants2')],true),po(m6,'Invariant  preservation',[event('CS_TopLevel_SignalToGREEN'),event('CS_TopLevel_SignalToGREEN'),invariant('CF_TESTING_sm_invariants1')],true),po(m6,'Invariant  preservation',[event('CS_TopLevel_SignalToRED'),event('CS_TopLevel_SignalToRED'),invariant('CF_TESTING_sm_invariants2')],true),po(m6,'Invariant  preservation',[event('CS_TopLevel_SignalToRED'),event('CS_TopLevel_SignalToRED'),invariant('CF_TESTING_sm_invariants1')],true),po(m6,'Invariant  preservation',[event('CS_TopLevel_SignalToORANGE'),event('CS_TopLevel_SignalToORANGE'),invariant('CF_TESTING_sm_invariants2')],true),po(m6,'Invariant  preservation',[event('CS_TopLevel_SignalToORANGE'),event('CS_TopLevel_SignalToORANGE'),invariant('CF_TESTING_sm_invariants1')],true),po(m5,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(attribType_signal_status)],true),po(m5,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('CS_TopLevel_invariants1')],true),po(m5,'Invariant  preservation',[event('User_PressesOn'),event('User_PressesOn'),invariant('CS_TopLevel_invariants1')],true),po(m5,'Invariant  preservation',[event('HDSystem_StartsConnectingPatient'),event('HDSystem_StartsConnectingPatient'),invariant('CS_TopLevel_invariants1')],true),po(m5,'Invariant  preservation',[event('HDSystem_StartsReinfusion'),event('HDSystem_StartsReinfusion'),invariant('CS_TopLevel_invariants1')],true),po(m5,'Invariant  preservation',[event('User_PressesOff'),event('User_PressesOff'),invariant(attribType_signal_status)],true),po(m5,'Invariant  preservation',[event('User_PressesOff'),event('User_PressesOff'),invariant('CS_TopLevel_invariants1')],true),po(m5,'Invariant  preservation',[event('CS_TopLevel_SignalToGREEN'),invariant(attribType_signal_status)],true),po(m5,'Invariant  preservation',[event('CS_TopLevel_SignalToGREEN'),invariant('CS_TopLevel_invariants1')],true),po(m5,'Invariant  preservation',[event('CS_TopLevel_SignalToRED'),invariant(attribType_signal_status)],true),po(m5,'Invariant  preservation',[event('CS_TopLevel_SignalToRED'),invariant('CS_TopLevel_invariants1')],true),po(m5,'Invariant  preservation',[event('CS_TopLevel_SignalToORANGE'),invariant(attribType_signal_status)],true),po(m5,'Invariant  preservation',[event('CS_TopLevel_SignalToORANGE'),invariant('CS_TopLevel_invariants1')],true),po(m4,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('CS_LowLevel_CFTesting_invariants2')],true),po(m4,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('CS_LowLevel_CFTesting_invariants1')],true),po(m4,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('CS_LowLevel_CFTesting_invariants3')],true),po(m4,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(inv1)],true),po(m4,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(inv2)],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_StartsTestingCF'),event('CS_LowLevel_StartsTestingCF'),invariant('CS_LowLevel_CFTesting_invariants2')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_StartsTestingCF'),event('CS_LowLevel_StartsTestingCF'),invariant(inv1)],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_StartsTestingCF'),event('CS_LowLevel_StartsTestingCF'),invariant(inv2)],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_StandsBy'),event('CS_LowLevel_StandsBy'),invariant('CS_LowLevel_CFTesting_invariants2')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_StandsBy'),event('CS_LowLevel_StandsBy'),invariant('CS_LowLevel_CFTesting_invariants1')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),event('CS_LowLevel_CFTestsOK'),invariant('CS_LowLevel_CFTesting_invariants2')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),event('CS_LowLevel_CFTestsOK'),invariant('CS_LowLevel_CFTesting_invariants1')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),event('CS_LowLevel_CFTestsOK'),invariant('CS_LowLevel_CFTesting_invariants3')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),event('CS_LowLevel_CFTestsOK'),invariant(inv1)],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),event('CS_LowLevel_CFTestsOK'),invariant(inv2)],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsKO'),event('CS_LowLevel_CFTestsKO'),invariant('CS_LowLevel_CFTesting_invariants2')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsKO'),event('CS_LowLevel_CFTestsKO'),invariant('CS_LowLevel_CFTesting_invariants1')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsKO'),event('CS_LowLevel_CFTestsKO'),invariant('CS_LowLevel_CFTesting_invariants3')],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsKO'),event('CS_LowLevel_CFTestsKO'),invariant(inv1)],true),po(m4,'Invariant  preservation',[event('CS_LowLevel_CFTestsKO'),event('CS_LowLevel_CFTestsKO'),invariant(inv2)],true),po(m4,'Invariant  preservation',[event('HDMachine_CFTests'),event('HDMachine_CFTests'),invariant('CS_LowLevel_CFTesting_invariants2')],true),po(m4,'Invariant  preservation',[event('HDMachine_CFTests'),event('HDMachine_CFTests'),invariant('CS_LowLevel_CFTesting_invariants1')],true),po(m4,'Invariant  preservation',[event('HDMachine_CFTests'),event('HDMachine_CFTests'),invariant('CS_LowLevel_CFTesting_invariants3')],true),po(m4,'Invariant  preservation',[event('HDMachine_CFTests'),event('HDMachine_CFTests'),invariant(inv1)],true),po(m4,'Invariant  preservation',[event('HDMachine_CFTests'),event('HDMachine_CFTests'),invariant(inv2)],true),po(m4,'Guard strengthening (split)',[event('HDMachine_CFTests'),guard(grd1),event('HDMachine_CFTests'),event('HDMachine_CFTests')],true),po(m3,'Feasibility of action',[action(init_HDMachine_CFTestedOK)],true),po(m3,'Feasibility of action',[action(act1)],true),po(m2,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(distinct_states_in_CS_LowLevel_CFTesting)],true),po(m2,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('CS_TopLevel_invariants2')],true),po(m2,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant('CS_TopLevel_invariants3')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsTestingCF'),event('User_PressesOn'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsTestingCF'),event('User_PressesOn'),invariant('CS_TopLevel_invariants2')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsTestingCF'),event('User_PressesOn'),invariant('CS_TopLevel_invariants3')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsConnectingPatient'),event('HDSystem_StartsConnectingPatient'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsConnectingPatient'),event('HDSystem_StartsConnectingPatient'),invariant('CS_TopLevel_invariants2')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsConnectingPatient'),event('HDSystem_StartsConnectingPatient'),invariant('CS_TopLevel_invariants3')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsReinfusion'),event('HDSystem_StartsReinfusion'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsReinfusion'),event('HDSystem_StartsReinfusion'),invariant('CS_TopLevel_invariants2')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsReinfusion'),event('HDSystem_StartsReinfusion'),invariant('CS_TopLevel_invariants3')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsStandingBy'),event('User_PressesOff'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsStandingBy'),event('User_PressesOff'),invariant('CS_TopLevel_invariants2')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsStandingBy'),event('User_PressesOff'),invariant('CS_TopLevel_invariants3')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsConnectingConcentrate'),event('HDSystem_StartsConnectingConcentrate'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsSettingRP'),event('HDSystem_StartsSettingRP'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsPreparingTS'),event('HDSystem_StartsPreparingTS'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsPreparingHP'),event('HDSystem_StartsPreparingHP'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsSettingTP'),event('HDSystem_StartsSettingTP'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('HDSystem_StartsRinsingDialyzer'),event('HDSystem_StartsRinsingDialyzer'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_StartsTestingCF'),invariant(distinct_states_in_CS_LowLevel_CFTesting)],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_StandsBy'),invariant(distinct_states_in_CS_LowLevel_CFTesting)],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_StandsBy'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_StandsBy'),invariant('CS_TopLevel_invariants2')],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_StandsBy'),invariant('CS_TopLevel_invariants3')],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),invariant(distinct_states_in_CS_LowLevel_CFTesting)],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),invariant('CS_TopLevel_invariants1')],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),invariant('CS_TopLevel_invariants2')],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_CFTestsOK'),invariant('CS_TopLevel_invariants3')],true),po(m2,'Invariant  preservation',[event('CS_LowLevel_CFTestsKO'),invariant(distinct_states_in_CS_LowLevel_CFTesting)],true),po(m1,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(superstateof_INITIATION_sm)],true),po(m1,'Invariant  establishment',[event('INITIALISATION'),event('INITIALISATION'),invariant(superstateof_ENDING_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Prepares'),event('HDSystem_StartsTestingCF'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Prepares'),event('HDSystem_StartsTestingCF'),invariant(superstateof_INITIATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Prepares'),event('HDSystem_StartsTestingCF'),invariant(superstateof_ENDING_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Initiates'),event('HDSystem_StartsConnectingPatient'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Initiates'),event('HDSystem_StartsConnectingPatient'),invariant(superstateof_INITIATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Initiates'),event('HDSystem_StartsConnectingPatient'),invariant(superstateof_ENDING_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Ends'),event('HDSystem_StartsReinfusion'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Ends'),event('HDSystem_StartsReinfusion'),invariant(superstateof_INITIATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_Ends'),event('HDSystem_StartsReinfusion'),invariant(superstateof_ENDING_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StandsBy'),event('HDSystem_StartsStandingBy'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StandsBy'),event('HDSystem_StartsStandingBy'),invariant(superstateof_INITIATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StandsBy'),event('HDSystem_StartsStandingBy'),invariant(superstateof_ENDING_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsConnectingConcentrate'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsSettingRP'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsPreparingTS'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsPreparingHP'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsSettingTP'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsRinsingDialyzer'),invariant(superstateof_PREPARATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsTherapy'),invariant(superstateof_INITIATION_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsEmptyingDialyzer'),invariant(superstateof_ENDING_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsEmptyingCartridge'),invariant(superstateof_ENDING_sm)],true),po(m1,'Invariant  preservation',[event('HDSystem_StartsOverviewingTherapy'),invariant(superstateof_ENDING_sm)],true)],_Error)).
+