{
 "note": "no_nonce_consume is EXPECTED to show no error: in the model the request-state compare-and-swap already prevents a second acceptance, so nonce consumption is a second, redundant layer there",
 "runs": {
  "design": {
   "as_expected": true,
   "expected": "NO_ERROR",
   "last_progress": "31984860 states generated, 8656832 distinct states found, 0 states left on queue.",
   "log": "tlc/design.txt",
   "status": "NO_ERROR",
   "violations": []
  },
  "no_auth_check": {
   "as_expected": true,
   "expected": "VIOLATION",
   "last_progress": "4384 states generated, 2213 distinct states found, 1842 states left on queue.",
   "log": "tlc/no_auth_check.txt",
   "status": "VIOLATION",
   "violations": [
    "Invariant NoUnauthorizedExecution is violated."
   ]
  },
  "no_digest_check": {
   "as_expected": true,
   "expected": "VIOLATION",
   "last_progress": "14008 states generated, 7074 distinct states found, 5457 states left on queue.",
   "log": "tlc/no_digest_check.txt",
   "status": "VIOLATION",
   "violations": [
    "Invariant NoUnauthorizedExecution is violated."
   ]
  },
  "no_nonce_consume": {
   "as_expected": true,
   "expected": "NO_ERROR",
   "last_progress": "34282716 states generated, 8656832 distinct states found, 0 states left on queue.",
   "log": "tlc/no_nonce_consume.txt",
   "status": "NO_ERROR",
   "violations": []
  },
  "permit_reuse": {
   "as_expected": true,
   "expected": "VIOLATION",
   "last_progress": "59184 states generated, 25308 distinct states found, 18409 states left on queue.",
   "log": "tlc/permit_reuse.txt",
   "status": "VIOLATION",
   "violations": [
    "Invariant NoDoubleExecution is violated."
   ]
  }
 },
 "schema": "ihvrk.tlc/1",
 "spec": "ihvrk/formal/IHVRK.tla"
}