! " #

$&%' #)(
*+
-,!
./#)0 1 23#
5hEE9'W>W)9A4@5hE'5'+158C 581
46587:9<;/=?>1=@BADC9'EE
=@BA5>?58 ;M5h A958W@BCCB@'O 9<
FGIHKJMLONQPRHKSUTWVMXY[Z\]ZMH_^`H
ZMGIPRZMP[r<SZkSRL!F[GIHJjLONQPRHSUT
abLOc8ZMNdSfe)LOG'SVMX gUGhXiVjNRe?ZkSRHlVjG
abLOcIZMNQSRe?LGSVMXnpVje)cIqhSRHlGIZMGhmgUGhXiVMNRe?ZkSfHKVjGrtsHlLOGhsOLOP
ZMGImonpVje?chqhSfLNrtsOHKLOGIsL
oZMGh8ZkSRSfZMGwvB!r/yjy'MMyd{MM'{
Y[VjGhVjulqIuKqwvIYg]xjyMz'{j{
|sOVj~NQ6} LzjSRSM
z)IxjZM\py~ZMy HKH} 'LOmIq
mh\TjLNOv8ZkSfsulHvuZMqh8ZM|sw} vc6Msz'VjNRHKMG8'Zh{~vNRyjVjjhM TMvILOGhhkbsOHlPPQqwLmIq
h<1i dMdQD`ODRd]Q D!ODR
WDQQdQ D k Q [dQ]OD`Q]dO W]QU
DD`I`RQkO`D`k!D fDRRU__I`]R[DDDOw]DQ_6-R_`ikwd_h_<jQD`kQd]DQDD kDDQdQ6`d+ DD[6QD _WUQQ]'8D-D-DpdQkdD``d kQRD_OiD`)_QM]Qd
DDQfRD?`d+Q _B QdDd_wQdUiDd`RdMdD6fDd``_  p D]D dD iRw_
-]_D_ kk_OhD`dkDQQb-kRDDQD8`Q`?  `pk UddDQf<D][`D`D:QD<Q)DDd
Q_ U`OQR iR ]6DdQODkRi`lDdkQ
_``
D`RpD`D ]``Dd`R_`Q
d`QDDDBD]_`R`Q_`6Db_QQkQD`DR_1Q<D] wD6kQdb dh
D<dQ D `_ i  RD_RR D UD`d`
MDQ-`]p`dbdiD ! dDkQdQQ[[`b]U D] i`h6QDdDw hDDR11_ t iw6ddd``MOdtM
DDk3MdRk!`
DQoM  `d`QpM`QdO`Q `DQDO_Dk]ddROdd`Q kBD bId D?dOh1dDfdQDk QDDDOMU!hDOpD`Qp O
i1p_]d`D
d`Qtw]dUDQk<iQD]`Q]Dd `B_`D dD`-]D`id QDd_`MQddMdOdb`D `DRdQQ6DdQD Q
ddQQhwwDid )]QQIkQ8dj``D+DOOff`QDwD`DwQk)_~pDQk ipRp'dDD`Q-Q]UD1dd dd`DMd-Dk_ki- QkQU`Q`b-!D_M8d
QdQDDD ]id]M!DDQb kww_dD-d[d!D`] `QQwkdk`k!R lDwD]DDd'd`Q M`DDDwQDD
DRQwD`dMd `Qw Odf-MQ[d ]QtDRQ_ `]k_D]`D
`D!DQQD`i ]D D d kDi1Qpkdd

D`DDo_dMUd`OdD]dD`D<RODk] kdRdO`RU` kDpDdOD`Mtd` Q___d!Dd]]_`MdD Q DQ_]didb8

]QD1dd8i i kBRd8DD _ _QD]Q_DDR`_]DDDQ8f
1

b6]RQdDQRQDDfd_ QDdQQkQOQ`RiwR` DDQMQ Ddp_DdQOh]k`t 1k

k`QQ/`]D R d/]~DDdd___dpQhwQQ w Q)Di`OdD RBd-k_ _`fkpkU!D]`p_ pDkkQ_wi6_]_kdDd<OQ
]`
k[Q ] kW _`Q`RO D` d] Q  `w`D_[MQdDDR` _]kd]d Qd`b_UQ!
Dd
DQQddO`/D?jiw+!f`_QdQwfDQ DD]`df  !]dd
!D]QDd` D[-~DkDRk
D~DDp``]`D`D~`DQkdR)]d
Bb`DOf 8lhD`Q Q f1DD`O`Q'`_k1!pD 8
RU O wQ``d`dRIdd'`DDh`Dk
+Y

[Z

\6]D^ _`]#

Tbdc7e&fDgih_c"j`k.lAm.nohDlKp9c
jTqrmGc&sDg6fDbt

Ra

vu

wNw

x

vY


 

k.l,y"l,ff{zqig6c
k.p9c
jvqrmGc&sDg6fDbt

|x





  

~}

  "!"#

$&%')((+*,'.-0/2143657*8(&-9%;:,*,*,<./21+=>?%A@325*B+CCDC0E,1
3F*G-)1"'.3H/6%.1"'I
J .% 1G@)*G-9*G1":K*L%.1NMO%A@,3HP'-9*RQ1+=/21"*,*G-)/21+=TSUE J MQVB+CCDC,WX

V6]+"# 8a

82]7
#

x  ^"#

`]Dd`8<QQQ 1QDw`DDBDB D 
DMDdO[`D`pQ`d[MDR_] DDlDO1D_QRdwD]kQD
`dD``[D~DiOdl  K]DR1QDdd]D Qd dDDDQ+`DD
d]_`Ddd8Dw`D`p[kRd`ik`_M RDDO]R]_`- Dd]kOQdiD 6Q6d]R``Q_Qdd
R'kO_d8 DD][Qi6DdM`dDDDk_6QkR1d8[_~Dp`Md_dR i Mk8QdQDDQD
dkih D]Q`DDwORDDRD`dQdQ`DDDwdd]ID`O``Q__`D`
`DQwf Dl-[h`hDDMQQ]_k`f6]d`]DQb~DDRMO
kh`D_6w`Dhd- DQ[D D-]Dd_`1k_R1 `dD]O
` D D`d`dikRtwDO]_ k QDQ_QfR`k`D Dd``i
_D1dBk`Q1 d _  pi8 i __R
`Q

D D d
`DR_`bd
DR QQ QkR`DpbOdiO Q`]Qd`-?QD-D_
Qd`QQ
D!dkQ_1DfkRMdQk~pR DDR!QdQpQQO
DD1QOK wdD`]D`Q`]d`dO`d`` dD`pM`d ]D`
Q`[O _`D  i
w]D[ _dUUwwDOkd] UD_D)`b]]M_d
_DU`DQkQ`]DD``p`d`Dd]`pD`QQQ`]iDQ`DM
dK ]k`D]` ]~DKd U`tkdw ]BkD R t D`]'dDQD-QDD QM 6_M_dd DQ
_?`]DQD
d`b j`QU idRDU R-kD`Qdd`WMdD
DMQ`RRWkd`kD<ob``dtDkR_ _]U``kOQd_D]D]DM`)R_QDpD
kR`R
d3dki!QD-D/?]dDd 8  Dd`diwO[_DQ_
Qp_]`RddQwQk~ D!p]D! dpkDDDWQDMDdMdkQii~ ]]QQQD`bKD`DD
D dM_RODQkUOdd`D1_:]Q 
au\Rx
N2]+^"#

 [

AY

2]D#

l)c+c"gy"mGh_pFl)f{hDlKnmGfLc
mdbc+eOfgf{z&lKmGyOhlKp9c
j
`t

h_c
bqoc
jifDjolK;s_ykDf_e

fnkDfc;f{z&pHk.lKpFjh{of_h{"pFjl)f{h_jrc
g6c{&p9f.kDu
[

u\ `]#

n l)c
by
l)f_ek.n7q&qoc
m.lc"ml`fy&sk.lAm{y&hDlAp9c"j`knkDf_esD

f{zq`fDm.p9fjrh_f{ebdc7e&fDgeOf.k.p2&jifDm_kD

&t

q`f_hDp9y
gp67f_ebc7e&fDgk8c
mkKqof{hDp hqim{c{qofm.lKp9f.kD

QjbDQ_Oik[wddD
D1kdd`D` iR D1k`
DQ`I_k 6d]DDMd`[Q wDdD`)8pdwDD8DRU`Q__/ddtB_]6kDQ
``DRD<p QDOMd)Q!DOD_QdpQUR`tRDDIQDDDQQ]dhOD`1f`DwQQQd
d DDQdO`` [DD `bdk
fQ1_]`[`wk1l`dd'``dR]Q
`DDDQ dOwpQ<DRdQ
]]ddOOI d
QD]bQM1dhfQ
D`D8DM`<d_dQ`t__``DD8Q1pd``Dd
DdD`[wDDDDDM] `D ~Dd`QD]dOQD_`DDQ]Wd
`k`I:wdDD1O pQd DQ ]]DDR``Q QQ[kDpD MQlk D`fQQd`_MQ
wQ_`DkdD`Dkb_```
wwD]Q p]`DkDdO_ D_RhbpMdIQttdDURd ` `Of
D6Rd`M R_D`Q i!pQ]1MDDQQOw  wQ[~Q _`dDR
w`wDDd _``Dd]]kDD
dOdOd]IDMQ`_Rd
`DQ`QQ]pWDd~ikQ_DiQ [bQQO
``jD6d/QwdBwDkddDi iU D1dD
D`Qd`RR`

M
Q _ D`Q`Q6[_w`DD` < QD`Ddk!`Q
QM
`wl`ddw8D`d]Qdk[ ` wDkd]d_RdRw6 DDQ
`DD]k]_`DD kRRd -_pwDQ]DQ]dpkd)DD]_M/ddQOQ!Q
dOQ pMwdODd dk`QD:`fOQUDdOQ Q~dD]DDdR
-QDDD]dR_Q Q p_D'``]
]d[O_
`R dw`k]QDDDD``Qk` `Q h DRdOD]D`
__d f]pDl'D-
]1DDd6DRhQD` iw8_6_dQRdQB _D]6D`dRI<
`QD`ODR_R
ikU]Dd _ i
jc{qofj?eOf.k.p2&jc
mfGzOl)fjok_p9sDpFgpFlK&

jrfmK"pHk.lKp9hpFjl,f,&mGy
lKp9c
j0pFlF0f{z&pHk.lKpFjl)f.k.lKpFjy
jiee&fD


sDn&+&pFj8l,f_h_jop9Dnofk

[p

;pFp

ot

ot

A9 O

 D+
i| 

 7  r7O
, 

[8t

wDRDUMD`d ~ pQDRR__MQbQQQDDD`OwDQ Q[dO_QD+DO

dkR_Q_`pO` d DQ
`  dQ?OwDQdD]MDQDO]Q ]Q` D k_RU`i`
DpwDd``D _Q`] ~dDQd`_DR Q`fR?DjBd
RU` ]`Rd

`DpQDMDQ_``DD` `k8Qf QD`O D B__Q_ d  ddd``-_R

d[Q
]hDidR`Q8b
?idD d_+DQ_`f!_DQb
_iRdDQdO_`)QDiQdOU~D QdD`  D
R_]`R]DiMQd]idO D-k_ _]d `D1dD`_RQ `~RQk]'k
]`Mddlh`pw_`D'` D _]DkddDQ_QiD]OR6O_Q`RDO D`dkRdQ] DdD]_D`Q``O_Bd
Q]`D_Qt_dD dDQI OtDMdDioD kDDRwiD]Q
DkR`Qd`fD`DD] fD1DbMdi_MMQDD`kD?QdD!MD`OQd_D_~Q_!dD
dR
DdQ`Q`-D<  ]RDMhD Q iw`kDQ!d!_Rk_D_DQR]bODQ8[f `R DldikBQ8<Mdk`Q
M`DR`kdjdQ]i?`d `_ RQ Rd dddRDwD DkQQ_QRDdQj`Dk
j`~d`pDd[1! dDd`Q
`]pd`DQ]dbDD DDdtDD`D1]D__`DbDDb`D?`
_ iUw wiDdwQ6[D`d`dDw]]DddIDRO`DDD
`ddd`] DdR _D
]Q`Qf`iDUD]fwf6]OiQ_ Q `D
]d MQkDMdi
]w`bQd Rp D1DD8QdQ MdD`d dd
`dk6pMDdD``DdM``dwQbi 1I`DDDdd```d
OUdDDpQ`
MQ_DQ`[`d`] `DkiU`</pMdO
DfD MpQMQdOO6pDQDQDMdRiDkQQp!dD`QkQQ' 8 DDf
Dp `D_QkRQU_DRp]Q_Q`_D`[k]RQOk- QdD`Qf 6DDDO
D]~_- D1`DD`D`Q``Ob ` d`
bMkdMdDdO1
]kDdOQ] Dd dD`Dd`]]``DD`QQDdD`dDO

+t

 |

 DV

QQQ OQ -]DM
kQQ_iWDMdD`D?]d
kQ'`wD/`D]!QU
__k`d_`dQD`QDwdD pd-kj! QDd_`U]Q]`O_
_ddtM dkDBdDh]RUDQDRdD6I DDD8MdQi Md8``DpDdkQQ
OQO6] ]` _UD `DMd6 RU6_ R
_M_Q-] dQ+ Dd+Q!D]DD[D `K -w]D)Did]/ QD D iwODQ
DDDMdp :dQ]MkD_Q`M d1_DbQDOR1` `pf`DpR
QdQ k-`jM[D_
QDD`U dDpRRiDkUDMQd/`]D ] QDi`1[QD)DMd[Qd
Mp!ddd
kQfD 6 Q _`D_D`d-_O`Dw k_]_dbQDQ-QQ
M
D w`DQ
i]BdD
db k di6_Q d iidB k pD
RiU/ DDdDfWDR`dQt_
fDD!`Dd`Q _ -``D]DMBDQOD
`DkRdhRDdDDQM]`D_) iwf``i?_d ~`D]``QDQ
iDkUw6 `D]k`bDQR1`DR D`Qd`dBMD`M]DkDDQ_dU
DRdi'QkdpUp d_MDDD`M8 p` pQDQQ'd' Q wpR D_RdQ]D__ ]pkb[Qd
iUQ[]Dd`]kO_`D[MDD`
DQO`RdQD`QDQ
bdO/ID`dQ)DDR[ ]D]Ddw`dQDBhQDDdQ]`DDk`DtD!O_`_Dd
`D`]?` D [d iQdd )Q 6]pk_QR_`iOD8`dDDd
dDb`iD]:_W_Od!]diQDdd
DDwDd`o]]kDD1Ddp_dDIb 1DDDO]`dkR-8kD`D Q_ QQ[ fkI_`
`QkDt_QI`Dwk_`]__Q-
D]]pR ~D_DDk_ bODp wQkd_ UbD`]dD
_RUd `O dkDRkd``QwD`OdDRk_R`DQ[`bQO`k
dp`d OD-DdM]hMDQ bd_``p```fk]ddd
]`_Q`Ddkd]MODQ`dD` wi~+d_d~_D~kDdkD Q[ 
]6Q`DkQd ` DR` QD`1Q dp i1kUDDQdR fO!`D[p`Q D`]Q[QQDdQQ

+Y

 N

N
.l)fbN.jf_hl)c
mO{l,fDbTc
lF.jf_hl)c
mO

7"

mGf.k.lKm.p9hl)f_ebc7e&fDg

Y

 &!
#

| _]7
#

NkDfDbdy"jolKp9hy{q

T6]7
#

Rh_`f_h{OfDm_k

+Y

rt


 
 ``r  r 9

sDnpFg6eOfm_k

iR ir+D 9 

 iRRu

 


 7 D+ x

lAp9c"j

8k.gp9hDpFj
dy&sk_lKmGyOhlpFjl,fDmKqimGfDl)y

Abstraction Spec
class Signs extends Int {
Tokens = {Zero,Pos,Neg};
...
Pos+Pos -> Pos;
}

AI Specification
Compiler

BASL

Restriction

PVS

Proof
Obligations

Abstraction
Library

max Stage is 3;

Back End

Abstraction Binding
abstract Connector.queue
with Signs;

Slicer

Specification

Property
Front-end

[](Heap.c1.queue>0 ->
<>Stage1.run:return)

Abstraction-Based
Specializer
{_{

SPIN

SMV
Trans

SMV

SAL
Trans

SAL

BIR

Intermediate
Representation
Constructor
{ _

Primitive Propositions

Java Source
public class Stage1
extends Thread {
public void run() {...}
}

SPIN
Trans

Jimple

Java
Front-End
9

Supplementary
Analyses

Counterexample
Main.main#3: (new Stage1()).
start();
Stage1.run#1: tmp = -1;
...

BIR-Jimple-Java
Tracer

Counter
example

h`D BwDd 6Od Rw-OQ`

hDRDO` D]`p`D_Q'D]dD`RUh`_-DD ` R`QQ6d_ ][QDD]QD`dR i6pDQ !k_ W ]`D~`+O]Q]DR`D
Q]6QOD`dR] dOw8D1_QD w`d``dQ_[~UQDO6D` QpQwOw[Q iBjw6d k_]R`D pOOfdpR]Q`DDkQdRt
`dR]Dwd]dMDhOR pQD`1D<`bQW
dD`Q ` DDD`Q`dQQw6D`OQw]QDQ` - `OD_dQ`R)R]ODf`
DM QkQ w`Dbd]_QD[dQ] D `R[)_MQidkQQp`)`` D
:wkwd`!dkQD`OlQd]QdDQ`RD]kQ DQdDpQDp
`D`Dkd]RDd`M kD[_]Q]dO QDQ DD `kD]Qi`R) KdO`QOpd]`QdQ `QdDQdDOD_
6D QO`twD~kd_Q-_D`kO_QRiDQ[o`RD `D WMkO_R d]Q`dRi`pwQQd``Q OdO`[kDDd
`kDDRDp _D i k RDR ` w iQUwQ`w _MQdD``QO`? bQkQddwk[]d``_Rd_DQ``QdDwD
DkM QDQD`kDMD`O<DD d D6`d]_Dd]O`d `h DD`ki[  pQkUbB ] DQ`QwhQd
]QD1d `df`UtQtDo`DDR_DdMIQQfw1M pMdO-OQ]R`dDQdO`Q
DQ1Mdi_``Mdd6`DfpwfDQQ'IwD]_MQ6DQQOtDQQQODQO<D w Q)`bD
 D -d]D`Q ]d
D]`D D
dQd``D]`DD
`DD`DQ1 dD] d ]DMD`Q`dQ 6 `` QQIkR[D] D D]Q6jfDp Dd_i]
`DDDb MM_DkR' DO_B_UD`Q1<dD`QQdh dQ _QQ<`R d]DQB`Od]DQBQDDDM R
 QD
`_D`d`D``]DDdR__ Q ]wiU dMRQUQ 6`` _Dd`Q' `f]D`QlQOkffR6D8p` dU Ok_dpd`O`Q] O]/`KO fdld
_]M_`D`_ Ud) kR]kDd-D`dko?w_Db`_` ` D_M`kQDdQddOkdi6`Qdb OfdbDD[DD: ``
d_`UDhd)Od]DDw`DRb_k`]DD`Rh DwDD[Dbdf DD`!QD`/R_DQOOf~O_d[OOD+!dD? Qk [`D
`DD`DR``d R!D`Dw]QD ddOIlQhk`DD`QDRddQQ DD`DQ Wd`d!:Q]``wDQD!DD`D Q `DDQ
bQkQi`pK8wQ6`Dd `O`DQDDp`8DQQB !DD6d ]OdDdpRDRQb`dDDkOdld6 1] D ` QbkD/DD_`DD?d
DQ]dDdMkQQ_ik  DIO1Q_DDp]]D`D`QDdDkRQ-p]Ddl MQRd``
dd<k<iR ]MDDQO`]D`dD8QdO `Q
D_t_MMQwdd``dQkQ `O``D`6D)DD`/QtDD<d`_Rk
_Q w``'D

wDDRUDo wDd /]``W D k`Q ]]DDdwOkdI dMQ``QI

d]&t

]

7#

k.pFlAp9c"j`k

`Y

+Y

;O`

&Y

qrm.pFbpFlKpF
fqim{c{qoc

`
8o [ O`&o

[

"O O )L)`  Z
O O



~ o


u +

R &
#

c+c"l

OpFbqigUfZ
V

 r

Y
7Y

N}

vY

Ax|

oY

+Y

[

d]DDODd`Qb[*]DMdQdd`kRQ_1``_d<RU'_`D`D `DD-DRDRd`] `Q[d

D Q`d _6] pOi6QwfDR8O`D 1wkdd8D```
p`bQD`Q
wDwQ, + _ `w.- Q kR`Qd D
DODR!D_Q` _DwkD_` ` )_Q Ddd]d_MQdQ
kd `ddM?d)DRDRR!Q~D_RdMDddM dDDD)`o
: DD
d`DO_bQU`DQQ?Q]UD~pd k_M]QdRiMdd`UkRQ
dMdkD
kDwd kQ-QQ
_MQkddR``Q`QQ`D
DddDD_`Dbw`DDQD` I ~ D~1DM_dw`tO
R[iDQD]Qd`QO Qd` Qi[Q]
 k_]dDdd`
BD`DDdkIQDR_QOO`D Dd` i U8`DQ`
O`Qi8`pDDwh`_h` dM1dDDIQtMRihd]BDRd
DRpUMddd`]dDp `DDR' `_dBD`DtQD 1bdDiDDhU`MQi]RdUdf]w`1dDRD
iUBdD`ODQdODQbQM_w ]] 1MdQMQ``Q`k!Q0 dQ/DD<`RD/]`dk]_Q`1 _/?DkdD
kDdO` ] ~`]DD]Q]dO_QbQ_]d8d_Ud]!D_p
DMidQDD1k `DDRd
Dww`DD`k`D`_D]Qf`dORR `Q] d]O``R` R~M d1dd_iM`B8
Q_M
kdO[d`]dD`dd][diOOM k_
_d`-p  `ddd
k D
R
]!-dkQdfd[ik1
kd`?QMkif6-[DjjddddOOf_R
i`kRQdDDd D]DD`` M 372 16]f 25k4 M1DMk 2 wbk_
_QD
` _8#p]`f k kQDQpO 25f4 dRdpDiM_QdBdDd
D_8 D d6kiRUD`i kR `DDQ]DO'DDBfDR
_ p ` w QDDQd_`D`QDDdD`-bt6_k U didMd
dQ
Q  _b`l`d`DdBRQdO`_Q~d`DdwdD
d _` MQdkQ tD hUp

DD1R `] fDdDR_Q]DD`]d f-R_]Q``b`DD1w_``Dd`dMMDd`]O`Q

D`D1 Qkfp`Dp``p]D`1D_ M1w]kQd
QbR[`fwfd
 ` d
? D  
   Q]`R)iD d]dOb `dQ_
dD]`D__``ddd]BddO``8  ipd]dODQ DD R/MDRdUd8_`DpQ]`DDOD
D`D d] 6OD`i_]_QMpQQdOMd8  tw6kDdkM_RRU8_``D
k QUD
` 
t D w`D` _QkwDDDp_MQQ
dkdQQ][DQdD D R _ MQ `
j l
QQOd6D `Q!
_QDd6RD-b6_D``d_`-`ddQ` 
D_Rp~D`k)_dD-DD ]`+QkkO_`kRk dt` p
h  D Q d` WwbQ`-iQDUQ-MdM[i/~`Oi[`DRD!QbRD dD)`dWd Q
ddOkp`-`6kQDDQk-O D `_MQ]dkQD h w
_Qpd]QdDOd] Qw]]_D` `DdO6`QDwpD`id
]dO`DtOD:`1Dd]Rd8OM  D Qd `MMDwD
Rd]+k  DdO<B6QQMbdRUD1/ f'D-D/wQ``D`QD[I]dOdppDQ
 

OfDf`d`M`D_R [_D`ddDd QDOf`pD`QOQRD!`R )!`d_)DQ!MDdD)O D]dD`DO

DMbQ)]_O``id
RDDddQ`D]dQO
D+Q O`kd_M`dkdddd
DQdOd` ` l`Do-kQQO[k`MQ 6Df`!8 D ]
dMwdQDd`d[`Rbd_M[d+DdfdR -pDD!D?MddD]`WDQ
OfDf o !df"$#!% &
"$# D( ')' D`Q~kQdDk`QkhdD`B
ikRd d~dDk`D`Dd b_ d]RQD`QQf]DQkQQQ`]`Q<kdd
dwDI]]jRQiId`dMQDdQDD  6``dfDD i dkUQdkwQ`'D [jD`Dd]b]Q
dOwDdDQQDQ8QkpDQD]Dd`1QpMdQhdOD1_p_k

~99 

 

 D+
i

4k.gp9hDpFjhm.pFl)fDm.p9c
j



O &`

O O )

L o )Oo&o
& O` ) Y
L o )Oo&o

Oo&`
!

l,fDbTjRf_hDl,c"m&_.l)fbN
c"lHjRf_hDl,c"m&

 L o [Oo&`

[]

oY

y&sk.lAmGyOhlKp9c
jgp9sDmGy
m.

T6]#

oY
.

Lx 

oY


#

Lx 

d
.l)fbN.jf_hl)c
m{l,fDbTc
lF.jf_hl)c
m&

02]O]#

L o

 O A O


vY
qimGc_q`fDm.lKp9f.k

N6]&]D#

`7

+p9y

;p9Ff+

 

7p9y

Tx

d

Lx|

]R_dD`Qp bDB! B __MQdUMIdQQ__ki U

`ki DUkU`-d'k!kwQ_b MdOf RD
d_R + ]k kDMddRdpikQKD _D`pd
D`QkQ] Db1kDdDW __`]  kBQOd`QQQW k
kfQ
dk`k d DQ1d tRp D? `OQid U _dOw_k`k[?]wkDf`8_QkiQO``U
`R_k` D RfQQi`D
Odbk[dDQj DiDRMUQ kiU
D]DR`ddMddR`pD Q_-D_DMQid`kQQQWfw` pd
]QdO
-`-d`kb`d`DR/QDdDkRO`QQiQUw
O DkpdMd`
R QD']Mdki!dUD`Dk MpddD]`D]`Q
ikkRdDQD R<DOd ]D``Q`_  dhDQDQDdDQQod
1Q  _O`Q Rik Rdk``di h`-dd
]DDD`QdO``DDMdQU]dDQQ``
`D?DQ]Dd`Di kRd Rd``k ]_U
]wMDdQO R -R_O]`[od  DkDQ[[  ``I_`-[`Dpdddd
k]MDR`BQbfd _ `-`dR_D`QD_R[QkURDQ
` dQ+QDw`DQ D9QQD-pbD]` D ` DDQ``<
Q
d_Q dDbdQD```QDpddD-`DDQDld  MdidU]D
[iU6]1Q wkiU`[`D
wDQ~k+d/[`!?ddQO
``DDWddRMQk!QDiR_QUOQ:D b QQ
Q QjwQ[!Odd]]MQDQ ddD]QdOD`Q`1<<DD
QQ]RQ_`QkdiQ6DQdQ]dO]D```dQl _tR_1DdDQ`1dtO`` khdD
Q!dOkQ]QD`D] DdQ~R_dQ]MD]Q6Qki`R6 < kw
QDQQ1 _DkQ__dQUQR ddRDd Dd`]Dh`d_DpQDdOR-R!8td ]Dk
-QDdd]DQ``D D/ w`Q d R ok_ O 
k]`D b]dDQQhDDdB_U
`tkQ]]D tRd`D`D_

`b`_`]Di-d`dd8 wdD ]`DM! _ p

dp_6dD`Q W[w_d
W WDQ1 D QDQQID
[] Q DQDbdQ`dR?wD[b`DkDQ?D]Qk ) _iOi`-
]Dd<DRQQ
]k :_Ddd`pDO?wkf DD_p ]DD`]-dD]l`dMQdDD8QDQfi k`U- ` D R!db`D`
d`ik U]DQ)wd]-DO_d - ]D`d] Q `[p QQ
`]`dDO[]Q]??dkORRd_1dQ_`DDD`RD]w`-k`Q~Q! wf`_w!]_
1`R!DQDQdk]``DD] Q` dM]`kUQ~R] ]Q`QQDd``Dd]D``
wDp1d )`MQ[BdRDQ+`Q]`Q`]`?1R_QROR
DQQ-``DQ  M M QRw` RDkkiD`QDRd  k_dU
/kikd_Q`D`DQ D]MQD[`Op  kifp Q
QDf`Q[Q DQ!bQ!Q dd_[kdDdwQbd ] ]D`-_Rd]]dOQ-kDD bO _`
Md f`O_`D``d_Rw `D`O`~fU 8 D /Q_]QQQdDk
_d `DD]DQd8p_`kdD1_RbDDQ-fUBk Dw+Dd_`MpQkdR`MD_DQkd]O_Q`Rkk
D_`]_`dpDdD]`dkOOB_O`k1D`D8 dQWD]p``DD_`pDR`hp _D6p  1DQ
-D]Ddl
DwD D`DDRD p kD_ QQp]DQd[6 QD
dQ_Q R__QQ-6_D-D`
`o`+ODD]Q/ Ddd]D]]R`DU[DD/D!:D`]d`Q/_Rb_diRdQD
`6QO DdkQt ``D
: pD`DQ
<QW6?]Dd`
]QdO`R1-dD ORD-wdODR` DDw`_dR
wd, ;D-Md1M`R]UD`QDQQ- bQ/ bDDDQ~hdi]kDdkO
`_M Q _D[DdDwdi-Qd`d`-bk` ` QQD DDDQ`O!]_[R_]D`DdQhD!`MOpd_`R
b_/-/DD~]~QD

Lx|

[

x

[Z

[

Lx|`

?fDfDjo;c7e&e

[

7Y k_p2&j
Lx|

Lx

pFjo7pHk.p9sg6f

x
7Y


#

[



Nx

[

[

Rau\~x
[

Rau\Rx

[

Rau\Rx

]



[

x
\u

[



 r7

[
[
Y

[

[

[

[

[

oY

|u

[

Lx|
x 
yOs.k.lKmGy&hDlRpFjl,fDmKqimGfDl)y
lKp9c
j
#

Lx|

[

[

Lx|

T4 O#

x

[

 +

Property Specification Window

Source Window
Counter Example Window

hD Iwd
b`] piQ`Q `8_D ]D`QD]O _] DQQD!1Q`_kR]k_Rd!k
DDODOQ]_lddR`dQDdM diQ QR Q[`_b`D]Ddp
Dd`QQU-Q`- D` kMOw-D d
iQU_bM1`DQ Q[`DkD
Qk]QDdkDdQ d`h[DQDR_`D`D
<
wDwDDkddd `_OdBQ D jdQh`MQ
> =D@ dA ?] C[lB ` w

R`Qt`Dh `BD_Dd``6Q_dQkkQtD_Q`ddD p DDQkQdD QU D]QD<DD`DO

`D Q'MDQDMQO w 6Dd`D ] MDQkOkQRkk kdj_``Q
dQ
DMMdQikQk`DDM_td 8``<`d<O``d?k_Qd
Dp-id ] dO]Q`[)ODDkfO`~D`Db1 D1D`1dd
ODDwD_K]`tQ p ]6DDdQd`6Dd
d`QURD`D]`dodDDdp U Q`OQU```OQ`k B_ d
`D1ODQ B<Qw1MtD]dOkRU t`DQDDhMBDQk]RRk`
D1DRd
D?``QD
d `Q]Q DW DQQ/`dQb DQkMQ_-RD
lDQQ-OffpDb
wDd `Q` ` `
8`t


#

 |

l)fmyOh{f

L}

 DV



y"jieOfmGy

kDfmT.jo

L} .Y

7#

L}

L}

L}

  

`Y

dOQ 
DpMDdOp
dD)kQdD`_dk`Q])]+DQ w d id[ f ~j_QdQddOpIwOff
D_`bk! k f dD/d`Rb[wDf`DkRO_`fRD`
R
kiU_`<`D_QDdl]`DjQpdd!DDb]_QRU`!d
d`D)DpD`dbR_hQ`D-DMdMdQikQDDQ_DQQ'p8dpd
`b1p_QU
UD`WRdk d`
OdM`RURp```dwD~dkMQ
d]DD Mdi `QppiUp]]DdMdD
`dWDDD`RMdD`Q _ pp/DQBb]U``Q dd`t`[` DD
D`kQ``D]~DiQ]d!O]RMQbd`-Q)?dd]kDDIQ'D dORR
OD d U 6$DF)F )ED G `D DiRUDBDQw!D]OD Dpbd
iDD`QD`Q `b Of D ]Qw`wDI :H  &]"$#!ODD
iM kUJ D iQUdDd]dD`Rd]RQk D1_Q Q LK
]wDMQp6QdiRD`Q]`_p`R`UpO!``Q]pDQjOd`dpO! _ w DD)D6dbDDfdDO`dbdwhDwdQ
`kwjd`kjMD `` `QQw[ DOQDdOQ 'dB6pDOQw]R
kiddBp N$O MQ$F ``Q iRU`1'k_ROdRDbb`d'
_i`kRddD__M1QQd```1`d NLO kQ_$F i RiUR UQtpdDDQD

o 

&`

O
`

&o&

 i
r
O O O

&o  O
`

PRQRSTUTWVXUSY[Z

T]\5SR\
^P`_5a]bUbXP]\acdPe fgPh)fgPi)fgP]j k

PRQRSTUT`_5a]bUbXP]\ac[Z

YUpUq Q ^P^ob5\RpXpXE ek
YUpUq Q ^PT]RbnP5ca]b^t5XRs^ob5\\5SXw~`Z
^ob5\Er5S5Q]pX)k
U^]QRXwRpXpXE`~
\UcUZSn^t\Lw~k l
PSR\ Pwob5\5XRcUcRpUY5\5XRsUU PXY5\
^]a]bXR
~`Z l
r5S5Q]pXERpXpX)k
RpXpXE ek
c5XR\Rp5cRbr5S5Q]pX)k
l
YUpUq Q ^PT]RbnP5ca]b^t5XRsra ^tsESRsUsLw^ob5\a ~0Z
RpXpXEa$k
b a\
^ UQUQw~k
l
YUpUq Q ^PT]RbnP5ca]b^t5XRsra ^tsT]\a]Y$w~`Z
RpXpXEE)k
b a\
^ UQUQw~k
l

PRQRSTUTWmSn^ob[Z

T]\5SR\
^PWYUpUq Q ^P`ra ^tsvu
Sn^obxw
y \Uc
^ob5zSRcUzUr!{}|
~`Z
VXUSY&.Pev`bX_5a]bUbXP]\acLw~k
VXUSY&.Ph`bX_5a]bUbXP]\acLw~k
w.bX y \5SRz5Xnenw~U~.T]\5SRcU\Lw~k
VXUSY&.Pi`bX_5a]bUbXP]\acLw~k
w.bX y \5SRz5XUhw~U~.T]\5SRcU\Lw~k
VXUSY&.P]jE`bX_5a]bUbXP]\acLw~k
w.bX y \5SRz5XUiw~U~.T]\5SRcU\Lw~k
w.bXE
^T]\5XbXRcLw~U~.T]\5SRcU\Lw~k
acw^ob5\d^t
ekI^] e)kI^tU
~
VXUSY&.PeSRsUsLw^U~k
VXUSY&.Pe.T]\a]Y$w~k
l
l

h`D 8wDQDQ
`_tR`- DR`w6R _8i k UDwdD`Q]8 dDdh-D1d
k[ p dD DD11ODD```dbf  dkQdddpDQd1`RDDD
_DiQ`UMddtd D 6ki_]`DdQQQ`DDd`O`DOR` 1 DDdM`RhUR!p6D N$_[O D$QRF
wDDDMR'
pRoDR/RDb)i6[kQ! _ DMd ` Q D`Md`DR`_]QDd
` kdD8wMdD``DD_Md1``Q_MQQkd _ [DQQ`dO 'OD
D
DD`kQD`Dd p`DDDd`-D DD k!k_Q_i[ R
D3}Q
QJo(o]`]IKQk   n.n
JkQg
_nin`n  
DkCWMdDiJkoQ_!ioo ~5,]` ID.Q_R +n g
~Jg nnlwD QRdk
DwDQ/_RD`p5-Jo`!/`Q`,kO[_, ` `d ` `n.n[
QJg
nnDnDoD!/d
``ktw`_]Q `[dDMQ`_`DD ` ` : `t`dwO bDd_`[Qkw-RD/`d 1```DQ
DMdR DDMQw`[D D`OU
h`QD`< Q-]]DMQR]ODDkQ- k[_`dD1DQwU`DD-DdpDd]twddwh D]DQhMkdD
wD DR ]pR8]Q<dDdRMDD6[dDDkkQ D_iikQd `ip k1QfDQ6QQD-RD'
D`DDQRi8_R
D' I dBO`DQ
Dd]D DB `O D jI
QD1i6_fd M w-] RUM`DwOphDdd
Q]`Od`D
8`Od`BwD
N`t

&o
&i

2]7!
#

[p

&o
&

OY

[p
 

[pFp
NO &`

[p
Dt

 

Dt

L}

i
8 

?
]&]

d^

T [

T^"!Tu

vt

d [
8

B`kQ`D`bOf
DdkMdk`QDpkQ__R R MD]QkDbQ~[D_Rd
`D)MK dRhwQ dOkMUQ DQ``6dDD
DK`d`kObId``DDw]DR]-`_dD  
DD[R_MDQkb_<DkMQd_ii dOUDR'Q `  ] [d`
`Q R pk`DD ]
wDDiDUI`D]MdDDddDd6 DUMdi`MRUd Q ]p_`R`D
_`BD]` d`Q R MdDDU`R'/Bd OBUd]dw<pDdd~`QQjdOh`
`DQ`M-di RD`1dD] k]Q<``]`1MQ`'k Q D`1<d ]k`DDdO
_dQ)DD `d D R D ]]`)khQ D D `]D-Dd]!dOR
Ddi[
kQ-D!DR]RD'wQpD]QOQ`k[d_MdDDdMOdi W  DD)D
 ROD Q kb`DD` k`]`R ` - bW
dD_ `D~DwD `pQD`QQ iRUD[J ] -D!_ bQ/wx D /w
DRbDdQ`DM!dD ` Q_pD

_DQd-RQ'8??DbQ]`~]Ddk]iQdQ+U`U Q ?UDR_ D d
_``_D`DQ1 $B`F)F Q)DdD[wDD!DdDMdDMd[``kDO
_+D`kD8D ]: MDdwk`RQk d ``d
w!DD]iDDD]MDD]_pUQ`D ] <D RD M?di f
Dw]dOt`]-UQDUpdQQD_`R _Q'Qw dft `QUk
iw-QD1_]IDDh]`d
_pD`6D``_RBD/wkddD

|O O`

PRQRSTUT y \5SRz5XneWXRU\5Xb5s T`R5c5XUSRsZ

YUpUq Q ^P`ra ^tsEcRpUb$w~Z
^ob5\\u YE ek
U^]QRXwg\u YEn~
^ wUwg\u Y5RVXUSY&.Pe}\5SXw~U~En~
VXUSY&.Ph(SRsUsLwg\u Y5
eU~k
VXUSY&.Ph(.T]\a]Y$w~k
l
l
PRQRSTUT y \5SRz5XUhEXRU\5Xb5s T`R5c5XUSRsZ$UU l
PRQRSTUT y \5SRz5XUiEXRU\5Xb5s T`R5c5XUSRsZ$UU l
PRQRSTUT`
^T]\5XbXRcXRU\5Xb5s TR5c5XUSRsZ
YUpUq Q ^P`ra ^tsEcRpUb$w~Z
^ob5\\u YE ek
U^]QRXwg\u YEn~
^ wUwg\u Y5RVXUSY&.P]j!}\5SXw~U~En~
y T]\5Xtua]p5\!Y5c
^ob5\Q]b$w
a]p5\RYUp5\d^T `\u Y~k
l

O O` OY

d& O`

7] o

[ 7

7]

 x

8& O`

 L

&o
&

&

7]

+]

Oo&o
 r

,t $R

o


5
R
U
R
R
R
U
R
U

& U
Un
& Un
]
& ]
& &n

Un
Un

$R



5

$]
R o$
otL
otL
otL
otL
otL
otL
otL
o
o

k
DDRDKQ`I`h1!QdDp`[wDU`DD`]] DQ]DRiO
Q`-` wkdD
DDRfd'RoiDd   UD`DR DQ`6 D 1] Q fQ
`kD1-Dk-`d D D]dD-[dDpk`_~dDQQ/1DQ
DQ_Q`DhDQIQQD`Dw fBD]Q`wdwd_[d1`Ot`iD
Q_<]f``pDDddQdOdddtBDQd`Q8DD1]DQDDbd' _`dddQk_DD d8`kQ_Q
D`d h RQ_]DdDp`DQ~Qkd8D_UdIDQ`!hdQdMB`QddB]D D Q``p]Qj`QkU
Dd`Q
*
_D_d` hB`
DW DDb`1DOiRkOdRkDQD`D]dkldQpDQDdDDdd`O
D`]`_QQU-O-diDd_k`/R`Df`!RQ-D~_d
` ]DR-/dDd_DDdDQRi`QU `-D~ `O Qb`DRQD_``k 1DDD
]iDD`Udwl OdDdd`dk-`]]w dlQMOD`QQk]Q_]R``QkD!QiM
`DQD_Q'd RO`Q-d!dDDpDO?ik?R`!_`DDpDp `D!`!]pidMURUM
DD`Q??_`QW`
MQQk
Q[`k*k *d6Qd/RDDD1`DQ`
D*-Q`RQw!_-pQ 1RDp_`D]fOMQwkQ[ fD
OQ `` h]DDD D]D`DfDDDjh6DBDkQi
<`Q
d
]Dd` DR!DD`b_`Q]bR*`kddRD~Dp1kDRkl QOd
B]d
D[R`ddd`w ` <Bh``D```iQQ `d d`RU!`Q)Dd Q
d_R6d1_-D`p`Q`Q-k1DD`R'
`dd<p]]D`d`ddlQ]D`` Q6I`Q_fR_dkfwMd`]R
QwDDD`1QD`R]O
d+Q` R _D lD w D`d]?D`d`]ddOk`DQ-:/DD`__R
D-`QdQD`Q `]]k_-``QkQ!` ] dDOQDDODQ]8DQ`dt8Q`d kR
_UDp
DD``D_k1[QdD`_R` l pk]DDQ `Od
fD QbMQ+D !R_`W]D`d]Q/

tR

n5

nnU
n


n
5

6]+"#

]"

d]

&!

&o  O

&o
&

|O`RK r `
&

 `

`t

T6]+"#

ou `

"o
O

&

6]+"#

x  ^"#

f+

 O]7
#

t ` 8wkd B`kQ`D
iMD[dd`]`D`DdipDp DdDtD`[`QkD Dd]dDM`dQ~i`?b w]_QId
Ddd
`_Q'D dMdkQ`Qw ] _`DkQDOd`O`DdU`didDw_DkD1d
8DdU``/- Dpk_U-]dDdkd[`dk_ i[8U6d
_QdD]QRd-_OQBO `iD1i!d[Db OD]d`MldDOi]`DR` D
d8DM]d[`DDD`f`DD`QQ
DpD]``[tD`D Ddd`DR_MBkD]td ]QK_Qd
*QDD`Q!fdM`QpQpQDpQQO Q`vD  D `D`d dbRQDd1kfDi
D
QQ1
d`db`_]`RdDiMQ]Dpdd1OR f -`idD' 1 DDpjdUh
IDkQ
DQRQ] `DD1QH pMD``DD`dQQ]dMfDLfQG `QffQ`DQ Dk`R1DD`
ID Q`DB6` d
w DiQ8 ]R<M dQ~_Q-]`D`DkdODp`D6O D _DUki_ IDD
Dk_Q d ikwQid d
RwdDQ``k]BDdD `D DiD
DjRfQ ]lD 6R tOf 8h`d lO 8 O
wBD ]Q`pioDi6]Q ``d B`d]dp:`f] dD-]/Q
RQ`d ` ` `D]k 1DDdRD_]OdQ`<ODQ`dw!p`D`D`DDkdDROMQQ
` dd k OQfQddddkDdQ]_`Dt iQU`D`Ddd`dk[ wiQD
Q]DDRR6D DBR_]Q`-`DDQw`D`Q`ipD`DDkdMdOi`
T^ot

T
#

d 

  

wwDDdd
QI ]M]DQOQ_6DRQO`DDOfQ
D_ D dh]Q
k
U`Q~DR``_`iQpfp`]`QkQQ
D``i_Q ddD`Q`iD
DDQdD`Q]DkfMpd]Q?`DWd``D_kDRRb`+R_R iwoQQDM
`UQW`Qd+ki`O`Dd`iMdRw6D`]]DDR'dOO
`]BWD QdO]MfRdUO`D
`]!QQ
`kb-6pQf``Did_RD1dMkQdO ]Ddt
MQwdOD`)d)`oO`QDW + QQDdDQD_DDDD
``QR! DoG `$F-%! D~D]%
pQ![F  DK_Q
O  %)%H$H)H
` kD`  `UUbwD`M6!QQQ ] D]Dd`Oh_
D`dd Q]Q BDRd`DdkRh `DOff_DDUMk `O d+`d_QQ``Dd`DK!]DQQ`
O D d ` Qk/]D`DDM`D)]DQ<`DQdQk
Q
`
MDDQbiMD` i]dtDQdUU
`D6Qd_D]`dQ`[ QDDDD`DMd]D D<d6O`QU``Dbd!] Q U
wRMdDDw!-
Dp M:dQDMQ6Q` p` DjD` [ dD[Dd R U`dD` < dDd
wD !DW`~ DfO D]-
DdDMD QOD Dk `  RO_`pW!QD k wdDddOD`wD w 6M-D
w DkdkR w wD w DdkO

:QAwk!x yPs"Q
'%LzLR7!="${ |t!"`}

= t~
(U~
$  |">& % 
@. B-9%G:,*K*,<./61+=.>%K@
) 9!9!9n
as^_ $OQBrM$eD E*E!2 ]
i] 8 * ke-/Z*t 2&  Le   2 >
U ;
 M 

t '
K=
g! =t .Z
'=;   X!
')( U>
X }.'
$ *t  X
! $
@. B-9%;:,*,*,<./21+=>|%K@
3657*BC.>,3E,1
3F*G-)1"'.3H/6%.1"'.I J %1G@)*G-9*;1":,*%.1TMO%A@)3HP'.-9*Q1+=./61"*,*;-)/61+=!2
9!9!9n
8 ZI
O
l rR
  2
$
$U ; 2U8  l ke-/Z* 2 mU m ! U! ] -s' 2 
r3;
% 
s L(U
"Q U'

Z (
'  K( Ue ") 
 }6%n  =
g }
U
"$'s-s % 8 t!  

 Z=
 "$ 
 * ']e @. B-9%G:,*K*,<./61+=.>%K@
3657*d{365|E,1
3F*;-)1"'3U/U%.1"'.IM&3F'.3H/6:>J1"'I G.>,/2>MG!H(7%.>,/1IHSHMJM? E*E)W2
m& =(
9!9!9n
9
S re  2s8
S ks-sZ*t 2 WmS q[%$
m!'

 Z&''+'
<'
g

! }.'
=
g! U "'=;  Y {]
! $t
@.
 =  ' (lkR  YR 
 * M ! U "$"$  p
%$@.}
f[ J MwC;EDC M





!  VmZ&"$=! '
" 2M qc@.q Me 9!O 2 m& =( 9!9!On
p
[ re  2V8 c c ke-/Z*t 2 mU q[% 2  8 %"$"QL
m&=;  Y {tt!
X!
  e'
Z&'

 "$'
( UV X }.'
e *t  X]
! $
' .Z 2 kR =R "$ *
 % ;P/ =U S9!O}6j 2 ''^mee *t

(! "$=
`<@.( U "Q
! ym&    ' 2  9!9!On

Uo
 re  28   ke-/Z*t 2 wr ; ;% 
^ m&  K'g (,.-/R
D(U
">
 ?! '
g 
! $
/={5*;-09%-9<*G-'.1"<
MG!H$K%.I /U: J %!H(;I73H'*0
g$
==;R]
3H/6%.123 p!p!pn^
3  rR *  2l8  q) -J
Z 2 I
M  \L/ U
"Q [ Z&'' (^
'=tt
(1s! *g !  tR '
dm M @ ? @. B-9%G:,*K*,<./61+=.>%A@R3657*+365
E,1
3F*G-)1"'.3H/6%.1"'IMBENN%.-_>A57%[(;2 ] ) 9!9*i
5 ; re * y M
'
'n !t] 8 &  U%   !`=
g }
U
"$'l'*   M %Vt] E,1
3F*G-)1"'.3H/6%.1"'I&7%!I+-)1"'I%1RMO%K@,360
$
==R
P'-9*N$"%;%I >@[%.-$"*,:[5+1"%.I %K=*G$
-9'1
>@[*;-2  9!9!9nV
jR L
 r ! { "Q$ %t">&  [% !tt
m M @ E9QiQQ$
-9'.1
>)':]0
3H/6%.1
>%1TMO%A@,3HPi'.-9*RQ1+=./61"*K*G-)/21+=*23!54h*7 T 3 i9]g 3 9j 2U8  ZI 9!9*i
h &
V r ! { "Q$

! t w">  S%!w
T % 
 }.=
g
  t! S'Q'

Zv  &' 
 $w
@. $57*,%.-9*G3H/6:,'.I'.1"<yJ(D("I /U*,<
9!9!9n
J>U(7*,:;3H>%A@ MBE b %G<*GI J 57*,:./21+=TS6f[ J MC&FDC)W2 m& =]$
 : &
V r ! { "Q 8 r3
m&"$ 
%$
m  (1.-/R
<">  S% *}
#TV\&g

 *t
 X! ">&  ')(g! "' ! 

<t& U
@.
$ 9!9!9n
B-9%;:,*,*,<./21+=>%A@Ras^_ $OQBrM$eD E*E!2 ]
] i]
m r U -e 
{ 2 & P/=' 2 k3 S& Z5c @.*t
=
  
  c'
 
'
<=;   QU
=%'] J J[b $
-A'.1
>)':;3H/U%.1
>%.1B-9%,=.-A'!H)0
$$ 9!9!pn
H/21+=$f'.1+=*I7'{=*G>'.1"<MG.>K3F*]H>2 34 7 T 3 :]g&:!p 2 *
 Od
D rs%$x

t  X
!  (K
Y=n ! U "$'<'W'  
*t
=n 
! ">  D%&
~
@. B-9%G:K*,*,<./61+=.>%A@N3657*
a%!I7-)365QJ J[b
ME
BSfcJRE,1
3F*G-)1"'.3H/6%.1"'.I J %.1G@)*G-9*G1":K*L%.1<acI+1":]0
3H/6%.1"'IlB-9%,=.-A'!H)H/21+=S6E J aB` E*E[W2 =! ' 3 :n g 3 i 32 m& =) 9!9!9n
 9<
k
 &'g! yI L3 kD">! L ^  "$ 
', (
'.Z !TVLR Z{ 
'g
(,.-?R w '
!(,]


-s %t! *t
 \"$= y
  gU]
E9QiQiQ $
-9'.1
>)':G3H/6%.1
>~%1LMO%A@,3HPi'.-9*Q1+=/21"*,*G-)/21+=*2*3!34 i 7 T j*Ojgj*9 h2
 ZI 9!9!:n
!
3 p
! 8 e+L3 M  } $57*$"*]H(7%.-9'.If%K=/6:%A@V_*,':;3H/,{*'1"<
m&=

!t
}6
t Y 2  9!9nU
J %.1":]I7-)-9*;1
3iMG.>,3F*]H> ~MD(+*,:G/ i:,'.3H/6%1 S
3 o 8  8   Y$ MG!H$A%I /U: b %;<*GI J 57*,:./21+= *-?tD LR "$
' 2  9!9 5
M  '%t

3!3
m v -J  2
8  Ps'
%&*Z 2   m&%R] M >mTL=
g   .Z&=;
*t
 X
! 'Z' "1R @. B-9%G:,*K*,<./61+=.>%A@3657*dC.365TE,1
3F*;-)1"'3U/U%.1"'.I
J %.1G@[*;-A*;1":,*L%.1JRI73F%!HL'.3F*K<QuR*,<!I7:G3H/6%.1Sf[ J MCKW2  9!9 3
3!5 <
P
^  }Pe 2 q
re n   2 n
mR
' 2M
q[" 2
 !n!
 2  M &

m  K}D*  !! =
"${! ( "$ }
-U

V @. B-9%G:,*K*,<./61+=.>%A@ J JM J ^< E*E!2 ] ) 9!9!9n

`t

7L[ "

Y

|
 )
!O`]7"^
x )!O {]"!O

 )"!&&!O"^
xx

" &`

x

  8

&" o

"!O!&!

uV}8Y

 )"^O!]7O
 )&O!`]7&!O

o
&U
]
   
 !#"$%n&')(U
t!
 

*+'g (,.-/R
U E9QiQQ$"-9'.1
>)':G3U/U%.1
>%1NMO%A@)3UPi'.-9*Q1+=/10
1"*,*G-)/21+=*23!3465*728 R]L 9!9!:n
3 
()U
; ! '
g  
<! "$= >">  '  (?t!  
g  
 !+=
g! U "$' @. 8  A!  2   gU 2B-A%;:,*,*K</21+=>%A@~3657*DC*E*EF
*
E)1
3H*G-)1"'.3H/6%1"'.IMG!H(7%.>,/1IH%.1TMO%A@)3HP'.-9*T$"*G>,3H/21+='1"<KJ1"'.I G.>,/2>
SUEAM
M$JW  L 8NM   '' 28 R
%v 9!9!On
5 M ! 'g ?QP ! '   LR'  S*t =n 
! UTVLW X 
Y

 +">&
 ( US '

> Z'
' ([=
g! U "$'S*Z$t! '
g  
! 
U>
==
g] \&"Q! I (^X\=! *'K
@. J %.1G@[*;-A*;1":,*`_*,:,%.-9<8%A@L325*
a%*I+-)365QJ 1
1I7'.I;J Jcb
MG!H(+%.>,/1IH%.1dB-)/21":G/ ("I *;>%A@eB-A%K=-9'!HK0
9*i!i
H/21+=$f'.1+=*I'G=*G>2 =!' 3!5 O]g 3!h!32 
jR[ kR "QR

 2 P l @! ' ( 2 P [ m&'
`
Ln & 
  
! 
 !
[(Ue t!  

* *  !Q=
! U "$'] MO%A@)3UPi'.-9*$0?B-A':;3H/U:K*'.1"<
Q^o)(7*;-)/U*;1":,*]2;3 9 4 i 7 T h i!ig&:!p 52 !  ZI 9!9!9n
h <
k * q kR  2 L 5
 k
 \& t 2 L3 rs 2  r3 AS
M  g& t!
*t
 X
! <'St%R
-/R
e '
!Q$U @. E9QiQQE,1
3F*G-)1"'.3H/6%.1"'.I
J %1G@)*G-9*;1":,*L%.1 J %!H(I+3F*G-+uR*;>,/=.12v g! ;3 9!9 3

]+!