Add a support for global invariants
stevana opened this issue · comments
It's quite common that we want some invariant to hold through out the execution of a program. To achieve this we currently we need to do something like:
postcondition model act resp = invariant model && case act of ...It would be nice if the state machine record had a maybe invariant field which would do this check inside the library, rather than by the user.