--- Sending of safe message followed by network partition. One ack
--- gets lost and is recovered so that safe massage can be delivered
--- in the regular configuration.

--- See delivered(proc,...) in the corresponding .out-file for the messages
--- delivered to the upper layer at proc.

in test.maude

mod TEST8 is

protecting TEST .

eq allprocs = sProcSet(proc("a")) sProcSet(proc("b")) sProcSet(proc("c")) .

--- initial state 

op start : -> State .
eq start =

    network(allprocs)
    mkinitialconf(allprocs)
    mkinitialprocs(allprocs)

    multicast-req(proc("a"), safe, data("")) 

    CONTROLLER(
      PERFORM(SEND(proc("a"),0)) ;     
      PERFORM(RECEIVE(proc("a"),0)) ;  
      PERFORM(RECEIVE(proc("b"),0)) ;  
      PERFORM(RECEIVE(proc("c"),0)) ;  

      PERFORM(RECEIVE(proc("a"),1)) ;  
      PERFORM(RECEIVE(proc("b"),1)) ; 
      PERFORM(RECEIVE(proc("a"),2)) ;  
      PERFORM(RECEIVE(proc("b"),2)) ;  
      PERFORM(RECEIVE(proc("c"),2)) ;  
      PERFORM(RECEIVE(proc("a"),3)) ;  
      PERFORM(RECEIVE(proc("b"),3)) ;  
      PERFORM(RECEIVE(proc("c"),3)) ;  

      ( PERFORM(CHANGE(proc("a"),sProcSet(proc("a")))) || --- a receives conf change
        PERFORM(CHANGE(proc("b"),(sProcSet(proc("b")) sProcSet(proc("c"))))) || --- b receives conf change
        PERFORM(CHANGE(proc("c"),(sProcSet(proc("b")) sProcSet(proc("c")))))    --- c receives conf change
      ) ;
      PERFORM(LOSE(proc("c"),1)) ;     

      ( PERFORM(EVS-START(proc("a"),true)) ||
        PERFORM(EVS-START(proc("b"),true)) ||
        PERFORM(EVS-START'(proc("c"),true)) ) --- a, b, and c finish sucessfully

      )
      .


endm

rew start .