arXiv Science⌕ Search

arXiv · 2609.37726

Modelling Shared-Space Coordination in mCRL2: a Bach-to-mCRL2 Translation Framework

Abstract

Although significant research has focused on the theory and implementation of data-based coordination languages, the critical aspect of their automated verification using model-checking techniques remains underexplored, which is essential for ensuring reliability and correctness in distributed systems. Existing tools, such as Anemone, provide a solid foundation for reachability-based verification of Bach programs. While they effectively analyze properties expressed in terms of state attainability, extending support to more expressive temporal specifications-such as liveness properties or invariants over shared space contents-remains an open opportunity. Such extensions are important to capture comprehensive system behaviors, for instance, ensuring that "a request is always matched by a response" or that "no message is silently lost". Addressing this limitation, we propose an automated translation from Bach to mCRL2, which explicitly represents the shared space, thereby enabling the use of mCRL2's mu-calculus model checker to verify complex properties beyond simple reachability. Complementing this translation, we introduce a systematic method to analyze the shared space in mCRL2 concerning data reachability, by directly expressing properties over the shared space's contents in the mu-calculus, thus providing a clearer framework for verification. This approach enables a novel verification process that combines action-based properties with state-based properties over the shared space contents, a largely unexplored area in current coordination-language verification approaches, offering a new dimension of analysis

Explore related subjects

Keep this discovery

Explore connections, maps & timelines

BibTeXRIS

Corentin Reuther, Jean-Marie Jacquet. 2026-09-29. Modelling Shared-Space Coordination in mCRL2: a Bach-to-mCRL2 Translation Framework. https://doi.org/10.4204/eptcs.453.5

Cite the original work for its findings. Save a collection to share your selection of sources.

KEEP EXPLORING

Related papers

Improved Tristate Multiplication With Formalization in Rocq

We give a new multiplication algorithm for tristate numbers improving upon the state-of-the-art implementation from the Linux kernel in terms of precision and formal proofs. Our algorithm is significantly more precise as shown by experimental evaluation (at the peak, giving better results in 95.59% cases compared to the previous work for 31-bit samples). Importantly, we achieve this additional precision with performance comparable to the previous algorithm, as demonstrated by benchmarks. Finally, we formalize and prove the soundness of the algorithm in the Rocq proof assistant, adding to the trust in the resulting implementation. Our algorithm is now part of the upstream Linux kernel. Our soundness proof in Rocq for the new multiplication algorithm works for all bit widths, while the SAT/SMT-based machine-checked proof accompanying the previous algorithm was restricted to 8 bits. We also provide Rocq proofs for the soundness and optimality of the newly added tnum union operation and the existing tnum addition algorithm from the Linux kernel. Our optimality proof for tnum addition presents a simpler and straightforward lemma compared to prior work.

cs.LO↗

Observer Determinacy of Termination Certificates: Sufficient Statistics, Blackwell Comparison, and Simple Projections for Step-Duplicating Recursion

The recursor $F(x,y,0)\to x$, $F(x,y,S(n))\to G(y,F(x,y,n))$ terminates and is confluent under all contexts, yet every orienting expression of the stated direct-measure grammar ignores the copied argument $y$; a payload-sensitive orienter exists outside it. An observer $q:X\to Q$ licenses a target $P:X\to V$ when $P$ is constant on its fibers. For a sound and complete language whose observer sees the input dimension, operational inexpressibility is equivalent to two context-sharing worlds with equal observations and different target values; each hypothesis is necessary. The counter observer licenses an orienting target outside the grammar's definable class. On finite sets with a rational prior, the least weight refused by a repair with $k\ge1$ side symbols is $1-V_k(μ)$, where $V_k$ is the best probability of guessing the target within $k$ tries per observation; this curve is weakly decreasing and convex. For set-valued certificate tasks with a certificate at every state, the least side alphabet is the maximum fiber chromatic number of the hypergraph of subsets whose common certificate set is empty. Observer refinement equals deterministic Blackwell comparison, and licensing equals statistical sufficiency under deterministic observation and a full-support prior. In every faithful recursor realization, natural-valued root and extracted-call rankings each have infinitely many full-order classes, and counter-determined extracted-call rankings have one. The occurrence-role channel separates the active and frame copies of one payload and resolves one bit under the uniform binary law. Every signature homomorphism constant in the counter slot identifies two terms that the counter projection separates. The declared cost model gives quadratic omitted mass against linear residual work. The general results and recursor instances are formalized in Lean 4.

cs.LO↗

New Proofs of Weak Normalization for Propositional Logic

We present new proofs of weak normalization for intuitionistic and classical propositional logics (with the full set of operators -- falsum, implication, conjunction and disjunction). These proofs work with cuts rather than cut segments, and they provide explicit ``local'' rules for determining whether to contract a whole proof or reduce one of its subproofs, and in the latter case, which subproof to reduce. Interestingly, much of the complication in the case of intuitionistic logic is due to the disjunction elimination rule, while our version of the same rule for classical logic has falsum as conclusion always, and so is much easier to handle. All the complication in the case of classical logic shifts to cuts involving the reductio ad absurdum rule. We also discuss a formalization of the entire proof in Lean, and present a deterministic algorithm for weak normalization.

cs.LO↗