| Definitions |  x:A. B(x), P   Q, Rds(R), Rda(R),  A,  b, p = q, R-base-domain(R), M1 || M2, R-base-ma(R), Prop, t  T,   x. t(x), p  q, i=j, 1of(t), if b t else f fi, p  q, 2of(t), true, P & Q, M1 ||decl M2, , x : t initially x = v, only members of L affect x :t, only L sends on (l with tg), with declarations ds:dsda:daeffect of k(v) is x := f s v, with declarations ds:dsda:dak(v) sends f s v on link l, (with ds: ds action a:T precondition a(v) is P s v), k affects only members of L, k sends only on links in L, only members of L read x, Top, false, mk-ma, P  Q, P Q, Realizer, Unit, x(s), False,  , , left  right, @loc x initially v:T, @loc only events in L change x:T, only events in L send on lnk with tag, @loc effect knd(v:T) x := f State(ds) v , sends knd(v:T) on l:tagged(g,State(ds),v):dt, @loc precondition for a(v:T):P State(ds) v, @loc: k writes only members of L, @loc: k sends only on links in L, @loc: only members of L read x |