-- another test for the new INVAR section

ASSIGN

  init(a) := 0;
  next(a) :=
    case
      !a & oracle_a : 1;
      1 : a;
    esac;

  init(b) := 0;
  next(b) :=
    case
      !b & oracle_b : 1;
      1 : b;
    esac;

INVAR
 
  !(oracle_a & oracle_b)

SPEC
  
  AG !(a & b)
