get_results : model -> (term_bdd * thm option * term list option) list option
Each result is a triple. the first component contains the BDD representation of the set of states satisfying the property. If the check succeeded, the second component contains a theorem certifying that the property holds in the model i.e. it holds in the initial states. The third component contains a counterexample or witness trace, if one could be recovered.
- holCheckLib.get_results m; > val it = SOME [(<term_bdd>, SOME|- CTL_MODEL_SAT ctlKS (C_EF (C_BOOL (B_PROP (\(v0,v1,v2). v2)))), SOME [``(F,F,F)``, ``(T,F,F)``, ``(F,T,F)``, ``(T,T,F)``, ``(F,F,T)``])] : (term_bdd * thm option * term list option) list option