INIT
  
  !a & !b

TRANS

  (a -> next(a))
  &
  (b -> next(b))
  &
  !(a & b)
  |
  a & b & !next(a) & !next(b)

TRANS
  
  next(c) <-> !c

SPEC
  
  AG (!a & !b)
