VAR
  a[4]
INIT
  !a[3] & !a[2] & !a[1] & !a[0]
TRANS
  next(a) = inc(a)
  |
  next(a) = dec(a)
SPEC
  AG !(a[3] & a[2] & a[1] & a[0])
