Transition System in N : int local a : int local i : int out x : int control pi0 : [0..2] Initially (x = 1 /\ (a,i) = (0,0) /\ 0 <= N) /\ pi0 = 0 Transition T1 Just: enable pi0 = 0 /\ ~(i = N) assign pi0 := 1 ; enable pi0 = 0 /\ i = N assign pi0 := 2 Transition T2 Just: enable pi0 = 1 assign pi0 := 0,a := x,i := i + 1,x := x + a |