Toward a more complete alloy

  • Authors:
  • Timothy Nelson;Daniel J. Dougherty;Kathi Fisler;Shriram Krishnamurthi

  • Affiliations:
  • Worcester Polytechnic Institute;Worcester Polytechnic Institute;Worcester Polytechnic Institute;Brown University

  • Venue:
  • ABZ'12 Proceedings of the Third international conference on Abstract State Machines, Alloy, B, VDM, and Z
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

Many model-finding tools, such as Alloy, charge users with providing bounds on the sizes of models. It would be preferable to automatically compute sufficient upper-bounds whenever possible. The Bernays-Schönfinkel-Ramsey fragment of first-order logic can relieve users of this burden in some cases: its sentences are satisfiable iff they are satisfied in a finite model, whose size is computable from the input problem. Researchers have observed, however, that the class of sentences for which such a theorem holds is richer in a many-sorted framework--which Alloy inhabits--than in the one-sorted case. This paper studies this phenomenon in the general setting of order-sorted logic supporting overloading and empty sorts. We establish a syntactic condition generalizing the Bernays-Schönfinkel-Ramsey form that ensures the Finite Model Property. We give a linear-time algorithm for deciding this condition and a polynomial-time algorithm for computing the bound on model sizes. As a consequence, model-finding is a complete decision procedure for sentences in this class. Our work has been incorporated into Margrave, a tool for policy analysis, and applies in real-world situations.