{
  "module": "CAINPBFTCommitSafety",
  "spec_sha256": "4b5dbbeda5bd6db9be9707a6e5f9dda1f0ea89656b9040e4ad018e1b134ce238",
  "checked_at": "2026-09-27T02:45:32.994302+00:00",
  "tool": "TLC (tla2tools.jar)",
  "classification": "MACHINE-CHECKED bounded model (exhaustive within bounds); NOT a proof about the Python engine",
  "bounds": "N=4, f<=1, Q=3, one sequence, views {0,1}, values {X,Y}",
  "verdict": "VALID",
  "runs": [
    {
      "run": "fixed_byzantine_replica_n4",
      "Byz": "{\"n4\"}",
      "OldRule": "FALSE",
      "IgnoreReports": "FALSE",
      "expected": "no error",
      "as_expected": true,
      "completed": true,
      "no_error": true,
      "violated": [],
      "states_generated": 1099897,
      "distinct_states": 290806,
      "depth": 32,
      "tlc_error": null
    },
    {
      "run": "fixed_byzantine_leader_n1",
      "Byz": "{\"n1\"}",
      "OldRule": "FALSE",
      "IgnoreReports": "FALSE",
      "expected": "no error",
      "as_expected": true,
      "completed": true,
      "no_error": true,
      "violated": [],
      "states_generated": 2512355,
      "distinct_states": 670340,
      "depth": 32,
      "tlc_error": null
    },
    {
      "run": "fixed_no_byzantine",
      "Byz": "{}",
      "OldRule": "FALSE",
      "IgnoreReports": "FALSE",
      "expected": "no error",
      "as_expected": true,
      "completed": true,
      "no_error": true,
      "violated": [],
      "states_generated": 18600059,
      "distinct_states": 4198642,
      "depth": 42,
      "tlc_error": null
    },
    {
      "run": "mutant_old_rule_execute_on_prepared_cert",
      "Byz": "{\"n4\"}",
      "OldRule": "TRUE",
      "IgnoreReports": "FALSE",
      "expected": "Agreement VIOLATED",
      "as_expected": true,
      "completed": false,
      "no_error": false,
      "violated": [
        "Agreement"
      ],
      "states_generated": 202713,
      "distinct_states": 48651,
      "depth": 14,
      "tlc_error": null
    },
    {
      "run": "mutant_new_primary_ignores_reports",
      "Byz": "{\"n4\"}",
      "OldRule": "FALSE",
      "IgnoreReports": "TRUE",
      "expected": "Agreement VIOLATED",
      "as_expected": true,
      "completed": false,
      "no_error": false,
      "violated": [
        "Agreement"
      ],
      "states_generated": 708068,
      "distinct_states": 214503,
      "depth": 22,
      "tlc_error": null
    }
  ],
  "reproduce": "python3 scripts/formal/run_tlc_pbft.py"
}