microsoft / CCF

The Timeout action defines messages to be unchanged, while Discard changes messages. Thus the conjunct is always false:

CCF/tla/consensus/ccfraft.tla

Lines 1219 to 1220 in b9fd7c8

    
           /\ Timeout(m.dest) 
        
           /\ Discard(m)

#6013

Found by checking that [][~ \E i,j \in Servers: RcvProposeVoteRequest(i,j)]_vars holds. However, TLC's coverage information also indicates this spec bug:

RcvProposeVoteRequest action is never enabled