MODULE main VAR a : boolean; b : boolean; c : boolean; INIT a = c INIT b != c TRANS (a = b) -> (next(a) = next(b)) SPEC AG (a != b)