get_results : model -> (term_bdd * thm option * term list option) list option
Each result is a triple. the first component contains the BDD representation of the set of states satisfying the property. If the check succeeded, the second component contains a theorem certifying that the property holds in the model i.e. it holds in the initial states. The third component contains a counterexample or witness trace, if one could be recovered.
- holCheckLib.get_results m;
> val it =
SOME [(<term_bdd>,
SOME|- CTL_MODEL_SAT ctlKS (C_EF (C_BOOL (B_PROP (\(v0,v1,v2). v2)))),
SOME [``(F,F,F)``, ``(T,F,F)``, ``(F,T,F)``, ``(T,T,F)``, ``(F,F,T)``])]
: (term_bdd * thm option * term list option) list option