Definitions | es realizer ind, True, P & Q, @i x initially v:T, @i only events in L change x : T, only events in L send on l with tg, @i events of kind k change x to f State(ds) (val:T), sends k(v:T) on l:tagged(g,State(ds),v):dt, @i Precondition for a(v)P State(ds) (v:T), @i: k affects only L, @i:k sends only on links in L, @i: only members of L read x |