VAR
  
  a[2]

ASSIGN

  init(a) := 0;
  next(a) := inc(a);

DEFINE
  
  ok := a[0];

SPEC
  
  AG !ok
